Lucene search
K

4 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2025/06/10 2:51 a.m.2 views

Malicious code in email-ext (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c4c79355714fdd4b93c7a36e4f249eee1ce00120cb74835c536968d2b6a2e3ba Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
Exploits0References3
OSV
OSV
added 2025/06/10 2:51 a.m.1 views

MAL-2025-4825 Malicious code in email-ext (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c4c79355714fdd4b93c7a36e4f249eee1ce00120cb74835c536968d2b6a2e3ba Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
Exploits0References3
Prion
Prion
added 2018/08/06 10:29 p.m.16 views

Design/Logic Flaw

jenkins-email-ext before version 2.57.1 is vulnerable to an Information Exposure. The Email Extension Plugins is able to send emails to a dynamically created list of users based on the changelogs, like authors of SCM changes since the last successful build. This could in some cases result in emai...

5CVSS5.2AI score0.00029EPSS
Exploits0References2Affected Software1
OSV
OSV
added 2018/08/06 10:29 p.m.20 views

CVE-2017-2654

jenkins-email-ext before version 2.57.1 is vulnerable to an Information Exposure. The Email Extension Plugins is able to send emails to a dynamically created list of users based on the changelogs, like authors of SCM changes since the last successful build. This could in some cases result in emai...

5.3CVSS6.7AI score0.00029EPSS
Exploits0References2
Rows per page
Query Builder