com.aceql:aceql-http (5.0.1), com.linecorp.armeria:armeria-tomcat8.5 (>=0.99.0, <=0.99.4) +6 more potentially affected by CVE-2026-42498 via org.apache.tomcat.embed:tomcat-embed-core (8.5.53)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.5.53 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.aceql:aceql-http 5.0.1 - com.linecorp.armeria:armeria-tomcat8.5 =0.99.0,...

Malicious code in midway-dataproxy (npm)

The package midway-dataproxy was found to contain malicious code...

MAL-2025-26310 Malicious code in midway-dataproxy (npm)

The package midway-dataproxy was found to contain malicious code...

org.apache.inlong:audit-proxy (>=1.10.0, <=1.12.0), org.apache.inlong:dataproxy-dist (>=1.10.0, <=1.12.0) +20 more potentially affected by CVE-2024-36268 via org.apache.inlong:tubemq-core (>=1.10.0, <=1.12.0)

org.apache.inlong:tubemq-core MAVEN version =1.10.0, =1.10.0, =1.10.0, =1.10.0, =1.10.0, =1.10.0, =1.10.0, =1.10.0, =1.10.0, =1.10.0, =1.10.0, =1.10.0, =1.10.0, =1.10.0, =1.10.0, =1.10.0, =1.12.0 and more Source cves: CVE-2024-36268 Source advisory: OSV:GHSA-QFF2-8QW7-HCVW...

org.apache.inlong:audit-proxy (>=1.10.0, <=1.12.0), org.apache.inlong:dataproxy-dist (>=1.10.0, <=1.12.0) +20 more potentially affected by CVE-2024-36268 via org.apache.inlong:tubemq-core (>=1.10.0, <=1.12.0)

org.apache.inlong:tubemq-core MAVEN version =1.10.0, =1.10.0, =1.10.0, =1.10.0, =1.10.0, =1.10.0, =1.10.0, =1.10.0, =1.10.0, =1.10.0, =1.10.0, =1.10.0, =1.10.0, =1.10.0, =1.10.0, =1.10.0, =1.12.0 and more Source cves: CVE-2024-36268 Source advisory: MEND:CVE-2024-36268...

org.apache.inlong:dataproxy-dist (0.11.0-incubating), org.apache.inlong:dataproxy-docker (0.11.0-incubating) +10 more potentially affected by CVE-2022-40955 via org.apache.inlong:inlong-common (0.11.0-incubating)

org.apache.inlong:inlong-common MAVEN version 0.11.0-incubating is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.inlong:inlong-common and may be impacted: - org.apache.inlong:dataproxy-dist 0.11.0-incubating - org.apache.inlong:dataproxy-dock...

org.apache.inlong:flume-ng-dist (0.9.0-incubating), org.apache.inlong:flume-ng-source-dataproxy (0.9.0-incubating) +3 more potentially affected by CVE-2022-40955 via org.apache.inlong:inlong-common (0.9.0-incubating)

org.apache.inlong:inlong-common MAVEN version 0.9.0-incubating is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.inlong:inlong-common and may be impacted: - org.apache.inlong:flume-ng-dist 0.9.0-incubating -...

org.apache.inlong:dataproxy-dist (0.10.0-incubating), org.apache.inlong:dataproxy-docker (0.10.0-incubating) +4 more potentially affected by CVE-2022-40955 via org.apache.inlong:inlong-common (0.10.0-incubating)

org.apache.inlong:inlong-common MAVEN version 0.10.0-incubating is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.inlong:inlong-common and may be impacted: - org.apache.inlong:dataproxy-dist 0.10.0-incubating - org.apache.inlong:dataproxy-dock...

Malicious Package in midway-dataproxy

All versions of midway-dataproxy contain malicious code. The package uploads system information to a remote server, downloads a file and executes it. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that...

GHSA-MQ9H-CWC2-6J5R Malicious Package in midway-dataproxy

All versions of midway-dataproxy contain malicious code. The package uploads system information to a remote server, downloads a file and executes it. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that...

PT-2020-21416

Name of the Vulnerable Software and Affected Versions midway-dataproxy versions affected versions not specified Description The issue concerns malicious code in the midway-dataproxy package, which uploads system information to a remote server, downloads a file, and executes it. Any computer with...

Malicious Package

Overview All versions of midway-dataproxy contain malicious code. The package uploads system information to a remote server, downloads a file and executes it. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored...