17 matches found
EUVD-2026-88404
A vulnerability was identified in deepseek-ai deepseek-harness up to 0.1.5-rc.3. Impacted is an unknown function of the file packages/e2b/e2b/src/index.ts of the component dsh. The manipulation of the argument E2BAPIKEY leads to reliance on untrusted inputs in a security decision. Local access is...
CVE-2026-101131
A vulnerability was identified in deepseek-ai deepseek-harness up to 0.1.5-rc.3. Impacted is an unknown function of the file packages/e2b/e2b/src/index.ts of the component dsh. The manipulation of the argument E2BAPIKEY leads to reliance on untrusted inputs in a security decision. Local access is...
CVE-2026-101131
A vulnerability exists in deepseek-ai deepseek-harness (dsh) up to version 0.1.5-rc.3 . The flaw is located in an unknown function within the file packages/e2b/e2b/src/index.ts , where the manipulation of the E2B_API_KEY argument leads to a reliance on untrusted inputs in a security decision . Th...
Malicious Package
Overview @a23842/dsh-notifier is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious Package
Overview dsh-waste-market is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious code in @a23842/dsh-notifier (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e90a9b8f9d25fdfb423c0110bb478302a429e4746efa54bdabb2885bc4e8bce The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
MAL-2026-15879 Malicious code in dsh-waste-market (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff08b82d3f992d5249efc4a0914c649542386b248af94f4aea510abc51dad0d5 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
Malicious code in dsh-waste-market (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff08b82d3f992d5249efc4a0914c649542386b248af94f4aea510abc51dad0d5 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
MAL-2026-15872 Malicious code in @a23842/dsh-notifier (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e90a9b8f9d25fdfb423c0110bb478302a429e4746efa54bdabb2885bc4e8bce The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
@forgeax/game (>=0.3.0, <=0.3.4), @huiliyi37/cordis-plugin-loader (>=0.2.0, <=0.8.0) +7 more potentially affected by CVE-2026-82393 via pnpm (>=11.5.3, <=11.7.0)
pnpm NPM version =11.5.3, =0.3.0, =0.2.0, =0.2.4, =0.1.2, =0.1.13, =2.2.0, =2.2.12 Source cves: CVE-2026-82393 Source advisory: OSV:GHSA-VQ4V-J7R6-JQ4M...
EUVD-2025-136046
Malicious code in tauahur-sofi-dsh npm...
EUVD-2001-0518
Malware in sbrugna...
Memory Corruption Vulnerability in SATOOL dsh Project File of Shenzhen Xianzhong Technology Co.
Ltd. is a technology enterprise and double soft enterprise engaged in the research and development, production, sales and service of Industry 4.0 core products. There is a memory corruption vulnerability in the SATOOL dsh project file of Shenzhen Xianzhu Technology Co. An attacker can exploit the...
Memory Corruption Vulnerability in SATOOL of Shenzhen Apparent Control Technology Co.
Ltd. is a company specializing in the development, production, sales and service of Industry 4.0 core products. Ltd. SATOOL memory damage vulnerability, attackers can use the vulnerability to construct a malformed dsh file leading to program crash, successful exploitation can cause arbitrary code...
CVE-2001-0525
Buffer overflow in dsh in dqs 3.2.7 in SuSE Linux 7.0 and earlier, and possibly other operating systems, allows local users to gain privileges via a long first command line argument...
CVE-2001-0525
CVE-2001-0525 affects dsh in dqs 3.2.7 on SuSE Linux 7.0 and earlier (and possibly other OSes). The vulnerability is a buffer overflow triggered by a long first command line argument, allowing local users to gain privileges. The available documents do not specify patches or exact affected product...