Malicious code in rippling-flux-dev-tools (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in flux_dev_tools.server.flask (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2384 Malicious code in flux_dev_tools (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2087 Malicious code in @realty-front/dev-tools (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2024-29651

A prototype pollution flaw was found in the API Dev Tools json-schema-ref-parser. This flaw allows a remote attacker to cause a denial of service, Cross-site scripting, or arbitrary code via the bundle, parse, resolve, and dereference functions. Mitigation Mitigation for this issue is either not...

json-schema-ref-parser Prototype Pollution issue

A Prototype Pollution issue in API Dev Tools json-schema-ref-parser v.11.0.0 and v.11.1.0 allows a remote attacker to execute arbitrary code via the bundle, parse, resolve, dereference functions...

GHSA-5F97-H2C2-826Q json-schema-ref-parser Prototype Pollution issue

A Prototype Pollution issue in API Dev Tools json-schema-ref-parser v.11.0.0 and v.11.1.0 allows a remote attacker to execute arbitrary code via the bundle, parse, resolve, dereference functions...

CVE-2024-29651

A Prototype Pollution issue in API Dev Tools json-schema-ref-parser v.11.0.0 and v.11.1.0 allows a remote attacker to execute arbitrary code via the bundle, parse, resolve, dereference functions...

CVE-2024-29651

A Prototype Pollution issue in API Dev Tools json-schema-ref-parser v.11.0.0 and v.11.1.0 allows a remote attacker to execute arbitrary code via the bundle, parse, resolve, dereference functions...

CVE-2024-29651

The @apidevtools/json-schema-ref-parser Node.js module (versions v.11.0.0 and v.11.1.0 ) is vulnerable to a Prototype Pollution flaw. Inadequate input validation in the bundle(), parse(), resolve(), and dereference() functions allows a remote attacker to modify Object.prototype properties via __p...

CVE-2024-29651

A Prototype Pollution issue in API Dev Tools json-schema-ref-parser v.11.0.0 and v.11.1.0 allows a remote attacker to execute arbitrary code via the bundle, parse, resolve, dereference functions...

CVE-2024-29651

A Prototype Pollution issue in API Dev Tools json-schema-ref-parser v.11.0.0 and v.11.1.0 allows a remote attacker to execute arbitrary code via the bundle", "parse", "resolve", "dereference functions...

CVE-2024-29651: Improperly Controlled Modification of Object Prototype Attributes

A Prototype Pollution issue in API Dev Tools json-schema-ref-parser v.11.0.0 and v.11.1.0 allows a remote attacker to execute arbitrary code via the bundle, parse, resolve, dereference functions...

PT-2024-22951

Name of the Vulnerable Software and Affected Versions json-schema-ref-parser versions 11.0.0 through 11.1.0 Description A Prototype Pollution issue in API Dev Tools allows a remote attacker to execute arbitrary code via the bundle, parse, resolve, dereference functions. Recommendations For versio...

The vulnerability of the macOS operating system’s Dev Tools component, which allows a hacker to increase their privileges

The vulnerability of the Dev Tools component of the macOS operating system exists due to insufficient testing of input data. Exploiting this vulnerability can allow attackers to gain increased privileges...

python-dev-tools (>=2019.4.24, <=2019.5.3) potentially affected by CVE-2023-5752 via pip (19.1.0)

pip PYPI version 19.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - python-dev-tools =2019.4.24, =2019.5.3 Source cves: CVE-2023-5752 Source advisory: OSV:GHSA-MQ26-G339-26XF...

python-dev-tools (>=2019.8.14, <=2019.8.24) potentially affected by CVE-2023-5752 via pip (19.2.2)

pip PYPI version 19.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - python-dev-tools =2019.8.14, =2019.8.24 Source cves: CVE-2023-5752 Source advisory: OSV:PYSEC-2023-228...

PT-2023-8477 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 14 Description: The issue exists due to insufficient input validation in a component of the macOS operating system, specifically in the Dev Tools. This could allow an app to gain elevated privileges. The issue was...

Malicious Package

Overview yasap-gulp-dev-tools is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

Malicious Package

Overview @realty-front/dev-tools is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...