Malicious code in ember-tracked-local-storag (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6dd398ad5717712317bbad8ef0a6ce4b41a0f3ef13ee48bd5ec8d9120495ab86 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ember-getowner-polyfill.import (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware de299415a84d24c99737d1dc90038b9ef5bf3e02dec1af6e1308fc486f1d4c69 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2717 Malicious code in ember-getowner-polyfill.import (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware de299415a84d24c99737d1dc90038b9ef5bf3e02dec1af6e1308fc486f1d4c69 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ember-font-awesome.no-fa-prefix (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cddea9d19e5c049fa86103d3bb9319dec8bf8aad46fa69a9bb23c6730920eee0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2716 Malicious code in ember-font-awesome.no-fa-prefix (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cddea9d19e5c049fa86103d3bb9319dec8bf8aad46fa69a9bb23c6730920eee0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2715 Malicious code in ember-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bc242e9ee4713b30aee81ff739dc19c110f1e9753eaccefd8d26de3f2a9c2e5f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ember-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bc242e9ee4713b30aee81ff739dc19c110f1e9753eaccefd8d26de3f2a9c2e5f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ember-graceful-retry (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9719465917747564618bbf24880f912f847f8f586efcccc286f85338d802f11d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ember-intl-i18n-twitch (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 69e053f81e691fac852be5c23f6b0809c49c081c83795e9b0d5197114b8422fd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2718 Malicious code in ember-graceful-retry (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9719465917747564618bbf24880f912f847f8f586efcccc286f85338d802f11d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2720 Malicious code in ember-intl-i18n-twitch (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 69e053f81e691fac852be5c23f6b0809c49c081c83795e9b0d5197114b8422fd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eslint-plugin-ember-rules-twitch (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fb99774c71f7a0427824181abb35d3a800cbfe36e63e1a632fa269ee682cedba Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2814 Malicious code in eslint-plugin-ember-rules-twitch (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fb99774c71f7a0427824181abb35d3a800cbfe36e63e1a632fa269ee682cedba Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2723 Malicious code in ember-sample (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ea1424c1057e118eb6d936f1b1295704f4850694a07e7c50e11e0582b48e4814 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ember-sample (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ea1424c1057e118eb6d936f1b1295704f4850694a07e7c50e11e0582b48e4814 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2022-16999 · Unknown · Ember Znet Stack

Name of the Vulnerable Software and Affected Versions: Ember ZNet stack affected versions not specified Description: A malformed packet containing an invalid destination address causes a stack overflow in the Ember ZNet stack. This leads to an assert, resulting in a reset, which immediately clear...

Unbounded connection acceptance in http4s-blaze-server

Impact blaze-core, a library underlying http4s-blaze-server, accepts connections unboundedly on its selector pool. This has the net effect of amplifying degradation in services that are unable to handle their current request load, since incoming connections are still accepted and added to an...

GHSA-XHV5-W9C5-2R2W Unbounded connection acceptance in http4s-blaze-server

Impact blaze-core, a library underlying http4s-blaze-server, accepts connections unboundedly on its selector pool. This has the net effect of amplifying degradation in services that are unable to handle their current request load, since incoming connections are still accepted and added to an...

Unbounded connection acceptance leads to file handle exhaustion

Impact All servers running blaze-core = 0.14.14, including blaze-http and http4s-blaze-server users, are affected. Blaze, accepts connections unconditionally on a dedicated thread pool. This has the net effect of amplifying degradation in services that are unable to handle their current request...

PT-2021-14396 · Unknown +2 · Blaze-Core +5

Name of the Vulnerable Software and Affected Versions: http4s versions prior to 0.21.17 http4s versions prior to 0.22.0-M2 http4s versions prior to 1.0.0-M14 Description: The issue is related to the blaze-core library, which accepts connections unboundedly on its selector pool. This can lead to a...