97 matches found
MAL-2025-18346 Malicious code in dev200-dynamodb-orm (npm)
The package dev200-dynamodb-orm was found to contain malicious code...
app.cash.backfila:client-misk (>=0.1.0 <=2023.11.24.141218-0357917), app.cash.backfila:client-misk-dynamodb (>=0.1.3-20210127.1838-76ab4fc <=0.1.4-20210806.0204-5341f38) +1456 more potentially affected by CVE-2025-8916 via org.bouncycastle:bcprov-ext-jdk15on (>=1.49 <=1.70)
org.bouncycastle:bcprov-ext-jdk15on MAVEN version =1.49, =0.1.0, =0.1.3-20210127.1838-76ab4fc, =0.1.3-20210127.1838-76ab4fc, =0.1.3-20210805.0116-93702c4, =0.1.3-20210805.0116-93702c4, =0.1.0, =2023.06.07.114626-93b9d6f, =0.1.0, =0.1.4-20220614.0152-5ae0eef, =3.0.1, =2.10.0-11-1, =1.1.5, =1.0.2,...
app.cash.backfila:client-misk (>=0.1.0 <=2023.11.24.141218-0357917), app.cash.backfila:client-misk-dynamodb (>=0.1.3-20210127.1838-76ab4fc <=0.1.4-20210806.0204-5341f38) +1359 more potentially affected by CVE-2025-8885 via org.bouncycastle:bcprov-ext-jdk15on (>=1.51 <=1.70)
org.bouncycastle:bcprov-ext-jdk15on MAVEN version =1.51, =0.1.0, =0.1.3-20210127.1838-76ab4fc, =0.1.3-20210127.1838-76ab4fc, =0.1.3-20210805.0116-93702c4, =0.1.3-20210805.0116-93702c4, =0.1.0, =2023.06.07.114626-93b9d6f, =0.1.0, =0.1.4-20220614.0152-5ae0eef, =3.0.1, =2.10.0-11-1, =1.1.5, =1.0.2,...
CVE-2021-21304
Dynamoose is an open-source modeling tool for Amazon's DynamoDB. In Dynamoose from version 2.0.0 and before version 2.7.0 there was a prototype pollution vulnerability in the internal utility method "lib/utils/object/set.ts". This method is used throughout the codebase for various operations...
MAL-2024-12086 Malicious code in dynamodb-data-mapper-js (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 93e1601651b9c7ac38203563ebdc9231ff5ac6298c9dee85fb2eeae24acdce30 The OpenSSF Package Analysis project identified 'dynamodb-data-mapper-js' @ 7.0.0 npm as malicious. It is considered malicious because: - The...
Malicious code in dynamodb-data-mapper-js (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 93e1601651b9c7ac38203563ebdc9231ff5ac6298c9dee85fb2eeae24acdce30 The OpenSSF Package Analysis project identified 'dynamodb-data-mapper-js' @ 7.0.0 npm as malicious. It is considered malicious because: - The...
Malicious code in util-dynamodb (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-9896 Malicious code in util-dynamodb (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-9686 Malicious code in lib-dynamodb (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in lib-dynamodb (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-9548 Malicious code in client-dynamodb (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in client-dynamodb (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in Be.Vlaandеren.Basisrеgisters.NisCodeService.DynamoDb (NuGet)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-4172 Malicious code in Be.Vlaandеren.Basisrеgisters.NisCodeService.DynamoDb (NuGet)
--- -= Per source details. Do not edit below this line.=-...
Improper Signature Validation
aws-database-encryption-sdk-dynamodb is vulnerable to Improper Signature Validation. The vulnerability occurs when a Set type is assigned a SIGNONLY attribute action. In such cases, there is a chance that the signature validation of the record containing a Set may fail during read, even if the Se...
Signing DynamoDB Sets when using the AWS Database Encryption SDK.
Impact This advisory addresses an issue when a DynamoDB Set attribute is marked as SIGNONLY in the AWS Database Encryption SDK DB-ESDK for DynamoDB. This also includes when a Set is part of a List or a Map. DB-ESDK for DynamoDB supports SIGNONLY and ENCRYPTANDSIGN attribute actions. In version...
GHSA-72FP-W44G-625Q Signing DynamoDB Sets when using the AWS Database Encryption SDK.
Impact This advisory addresses an issue when a DynamoDB Set attribute is marked as SIGNONLY in the AWS Database Encryption SDK DB-ESDK for DynamoDB. This also includes when a Set is part of a List or a Map. DB-ESDK for DynamoDB supports SIGNONLY and ENCRYPTANDSIGN attribute actions. In version...
PT-2023-32985 · Amazon · Aws Database Encryption Sdk (Db-Esdk) For Dynamodb
Name of the Vulnerable Software and Affected Versions: AWS Database Encryption SDK DB-ESDK for DynamoDB versions 3.1.0 and below Description: The issue arises when a DynamoDB Set attribute is marked as SIGN ONLY in the AWS Database Encryption SDK DB-ESDK for DynamoDB, including when a Set is part...
