@zextras/carbonio-admin-ui (>=0.4.4-devel.1654173975013, <=0.9.30), @zextras/carbonio-design-system (>=0.1.3-devel.0, <=12.0.3) +9 more potentially affected by CVE-2025-68467 via darkreader (>=4.7.15, <=4.9.105)

darkreader NPM version =4.7.15, =0.4.4-devel.1654173975013, =0.1.3-devel.0, =0.3.0-devel.1642600405487, =0.1.0-beta.12, =0.1.0-beta.6, =0.1.0-beta.0, =1.1.11, =0.1.1-beta.0, =2.1.0, =2.2.0 - samagra-ui 1.0.1 Source cves: CVE-2025-68467 Source advisory: SNYK:JS-DARKREADER-15441035...

Origin Validation Error

Overview darkreader is a Dark mode for every website Affected versions of this package are vulnerable to Origin Validation Error via the process of requesting style sheets from a locally running web server. An attacker can access sensitive information by tricking a user into visiting a malicious...

@zextras/carbonio-admin-ui (>=0.4.4-devel.1654173975013, <=0.9.30), @zextras/carbonio-design-system (>=0.1.3-devel.0, <=12.0.3) +9 more potentially affected by CVE-2025-68467 via darkreader (>=4.7.15, <=4.9.105)

darkreader NPM version =4.7.15, =0.4.4-devel.1654173975013, =0.1.3-devel.0, =0.3.0-devel.1642600405487, =0.1.0-beta.12, =0.1.0-beta.6, =0.1.0-beta.0, =1.1.11, =0.1.1-beta.0, =2.1.0, =2.2.0 - samagra-ui 1.0.1 Source cves: CVE-2025-68467 Source advisory: OSV:GHSA-X369-MCW8-8RVJ...

Origin Validation Error

Overview org.webjars.npm:darkreader is a Dark mode for every website Affected versions of this package are vulnerable to Origin Validation Error via the process of requesting style sheets from a locally running web server. An attacker can access sensitive information by tricking a user into...

darkreader 安全漏洞

DarkReader is an open-source web dark mode browser extension developed by Dark Reader. Versions of DarkReader prior to 4.9.117 contained a security vulnerability, which was caused by improper cross-source style sheet handling. This vulnerability could allow access to style sheets on the local...