Atlassian Confluence 8.1.1 < 8.4.1 Tomcat Dependancy Vulnerabilty

According to its self-reported version number, the Atlassian Confluence application running on the remote host is 7.13.15 prior to 7.13.19, 7.19.7 prior to 7.19.11 or 8.1.1 prior to 8.4.1. It is, therefore, affected by a vulnerability in the bundled Apache Tomcat. If non-default HTTP connector...

Malicious code in dependancy_confusion_test_tal2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 73729039e4d85fe520736702b47a1c7279bbcc907a4d902a3ca114a800afc943 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-240 Malicious code in dependancy_confusion_test2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 269b9df971bd3c661d32d61626eeffba4ded3144fa13d60f3f6acc010dcce776 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-GH88-3PXP-6FM8 Infinite Loop in colors.js

The package colors after 1.4.0 are vulnerable to Denial of Service DoS that was introduced through an infinite loop in the americanFlag module. Unfortunately this appears to have been a purposeful attempt by a maintainer of colors to make the package unusable, other maintainers' controls over thi...

Code injection

The package colors after 1.4.0 are vulnerable to Denial of Service DoS that was introduced through an infinite loop in the americanFlag module. Unfortunately this appears to have been a purposeful attempt by a maintainer of colors to make the package unusable, other maintainers' controls over thi...