PT-2026-104407

An authenticated LimeSurvey Community Edition 7.4.0 user with the global Surveys: create permission can store a JavaScript-breaking value in the date min attribute of a Date/Time question. When another user renders the affected question, LimeSurvey inserts the stored value into a single-quoted...

Malicious code in date-min (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2c85611f0d2bf7147b9f3fc95fad6c21702ef493fad36161c2e8becab150a2d8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in date-min

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...