CVE-2025-0305

creationtimestamp| type| source ---|---|--- 2026-05-08 07:32:00+00:00| seen| https://bsky.app/profile/dusk-services.bsky.social/post/3mld7mb7uwa2u 2026-05-08 07:32:00+00:00| seen| https://bsky.app/profile/dusk-services.bsky.social/post/3mld7madfxm2a 2026-05-08 07:32:01+00:00| seen|...

EUVD-2024-1186

Malicious code in bioql PyPI...

Malicious code in dusk-ogkuk-nvgzy-zenith-project (npm)

The package dusk-ogkuk-nvgzy-zenith-project was found to contain malicious code...

Malicious code in song-36t7m-akqee-dusk-project (npm)

The package song-36t7m-akqee-dusk-project was found to contain malicious code...

MAL-2025-14449 Malicious code in amethyst-2b7d4-vsh0l-dusk-project (npm)

The package amethyst-2b7d4-vsh0l-dusk-project was found to contain malicious code...

MAL-2025-23571 Malicious code in jade-tt6fi-57bah-dusk-project (npm)

The package jade-tt6fi-57bah-dusk-project was found to contain malicious code...

MAL-2025-18991 Malicious code in dusk-lvvgg-m58r7-obsidian-project (npm)

The package dusk-lvvgg-m58r7-obsidian-project was found to contain malicious code...

Malicious code in dusk-lvvgg-m58r7-obsidian-project (npm)

The package dusk-lvvgg-m58r7-obsidian-project was found to contain malicious code...

MAL-2025-22236 Malicious code in harp-86myn-b5m8t-dusk-project (npm)

The package harp-86myn-b5m8t-dusk-project was found to contain malicious code...

Malicious code in harp-86myn-b5m8t-dusk-project (npm)

The package harp-86myn-b5m8t-dusk-project was found to contain malicious code...

Malicious code in jade-tt6fi-57bah-dusk-project (npm)

The package jade-tt6fi-57bah-dusk-project was found to contain malicious code...

MAL-2025-23578 Malicious code in jade_cdqfy_bcesm_dusk (npm)

The package jadecdqfybcesmdusk was found to contain malicious code...

MAL-2025-33656 Malicious code in song-36t7m-akqee-dusk-project (npm)

The package song-36t7m-akqee-dusk-project was found to contain malicious code...

MAL-2025-18992 Malicious code in dusk-ogkuk-nvgzy-zenith-project (npm)

The package dusk-ogkuk-nvgzy-zenith-project was found to contain malicious code...

CVE-2024-32003

wn-dusk-plugin Dusk plugin is a plugin which integrates Laravel Dusk browser testing into Winter CMS. The Dusk plugin provides some special routes as part of its testing framework to allow a browser environment such as headless Chrome to act as a user in the Backend or User plugin without having ...

GHSA-CHCP-G9J5-3XXX Dusk plugin may allow unfettered user authentication in misconfigured installs

The Dusk plugin provides some special routes as part of its testing framework to allow a browser environment such as headless Chrome to act as a user in the Backend or User plugin without having to go through authentication. This route is URL/dusk/login/USER ID/MANAGER - where URL is the base URL...

Dusk plugin may allow unfettered user authentication in misconfigured installs

The Dusk plugin provides some special routes as part of its testing framework to allow a browser environment such as headless Chrome to act as a user in the Backend or User plugin without having to go through authentication. This route is URL/dusk/login/USER ID/MANAGER - where URL is the base URL...

CVE-2024-32003

wn-dusk-plugin Dusk plugin is a plugin which integrates Laravel Dusk browser testing into Winter CMS. The Dusk plugin provides some special routes as part of its testing framework to allow a browser environment such as headless Chrome to act as a user in the Backend or User plugin without having ...

CVE-2024-32003

The CVE-2024-32003 issue affects the wn-dusk-plugin (Winter CMS Dusk plugin), where a special route [[URL]]/_dusk/login/[[USER ID]]/[[MANAGER]] could allow unauthenticated access to user accounts if the Dusk plugin is publicly available and misconfigured. The attached connected documentation conf...

CVE-2024-32003 Dusk plugin may allow unfettered user authentication in misconfigured installs

wn-dusk-plugin Dusk plugin is a plugin which integrates Laravel Dusk browser testing into Winter CMS. The Dusk plugin provides some special routes as part of its testing framework to allow a browser environment such as headless Chrome to act as a user in the Backend or User plugin without having ...