MAL-2025-7111 Malicious code in @bazel-example/vue-library (npm)

The package @bazel-example/vue-library was found to contain malicious code...

Malicious code in 911-js-test-example (npm)

The package 911-js-test-example was found to contain malicious code...

Malicious code in fivetran-webhook-example-express (npm)

The package fivetran-webhook-example-express was found to contain malicious code...

Malicious code in geospatial-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 74393d640797f18f4e110cfb20f3f2be681c867e2383cfa386f78a3fad2065f8 The OpenSSF Package Analysis project identified 'geospatial-example' @ 2.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2025-6874 Malicious code in geospatial-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 74393d640797f18f4e110cfb20f3f2be681c867e2383cfa386f78a3fad2065f8 The OpenSSF Package Analysis project identified 'geospatial-example' @ 2.0.0 npm as malicious. It is considered malicious because: - The package...

PT-2025-34323 · Pypi · Litestar

Summary Litestar does not escape url paths when logging exceptions. This makes logger vulnerable to CRLF injection if logging level is configured to debug or log exceptions is set to "always", which allows attackers to inject newlines and forge log entries. Details Litestar directly formats...

org.apache.camel:camel-example-cxf (>=2.9.1, <=2.9.2), org.apache.cxf.systests:cxf-systests-jaxrs (2.5.2) +6 more potentially affected by CVE-2025-48913 via org.apache.cxf:cxf-rt-transports-jms (2.5.2)

org.apache.cxf:cxf-rt-transports-jms MAVEN version 2.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-transports-jms and may be impacted: - org.apache.camel:camel-example-cxf =2.9.1, =2.9.2 -...

org.apache.camel:camel-example-cxf (>=2.9.6, <=2.9.8), org.apache.cxf.systests:cxf-systests-jaxrs (2.5.9) +6 more potentially affected by CVE-2025-48913 via org.apache.cxf:cxf-rt-transports-jms (2.5.9)

org.apache.cxf:cxf-rt-transports-jms MAVEN version 2.5.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-transports-jms and may be impacted: - org.apache.camel:camel-example-cxf =2.9.6, =2.9.8 -...

org.apache.camel:camel-example-cxf (>=2.10.5, <=2.10.6), org.apache.cxf.systests:cxf-systests-jaxrs (2.6.8) +9 more potentially affected by CVE-2025-48913 via org.apache.cxf:cxf-rt-transports-jms (2.6.8)

org.apache.cxf:cxf-rt-transports-jms MAVEN version 2.6.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-transports-jms and may be impacted: - org.apache.camel:camel-example-cxf =2.10.5, =2.10.6 -...

org.apache.camel:camel-example-cxf (>=2.12.4, <=2.13.2), org.apache.cxf.systests:cxf-systests-jaxrs (2.7.11) +8 more potentially affected by CVE-2025-48913 via org.apache.cxf:cxf-rt-transports-jms (2.7.11)

org.apache.cxf:cxf-rt-transports-jms MAVEN version 2.7.11 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-transports-jms and may be impacted: - org.apache.camel:camel-example-cxf =2.12.4, =0.5.0, =0.5.5 Source cves: CVE-2025-48913...

org.apache.camel:camel-example-cxf (2.13.4), org.apache.cxf.systests:cxf-systests-jaxrs (2.7.14) +7 more potentially affected by CVE-2025-48913 via org.apache.cxf:cxf-rt-transports-jms (2.7.14)

org.apache.cxf:cxf-rt-transports-jms MAVEN version 2.7.14 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-transports-jms and may be impacted: - org.apache.camel:camel-example-cxf 2.13.4 - org.apache.cxf.systests:cxf-systests-jaxrs...

org.apache.camel:camel-example-cxf (2.10.0), org.apache.cxf.systests:cxf-systests-jaxrs (2.6.1) +7 more potentially affected by CVE-2025-48913 via org.apache.cxf:cxf-rt-transports-jms (2.6.1)

org.apache.cxf:cxf-rt-transports-jms MAVEN version 2.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-transports-jms and may be impacted: - org.apache.camel:camel-example-cxf 2.10.0 - org.apache.cxf.systests:cxf-systests-jaxrs...

org.apache.camel:camel-example-cxf (1.4.0), org.apache.cxf:cxf-eclipse-plugin (2.1.1) potentially affected by CVE-2025-48913 via org.apache.cxf:cxf-rt-transports-jms (2.1.1)

org.apache.cxf:cxf-rt-transports-jms MAVEN version 2.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-transports-jms and may be impacted: - org.apache.camel:camel-example-cxf 1.4.0 - org.apache.cxf:cxf-eclipse-plugin 2.1.1 Sour...

org.apache.camel:camel-example-cxf (>=1.6.0, <=2.0-m1), org.apache.cxf:apache-cxf (2.1.4) +8 more potentially affected by CVE-2025-48913 via org.apache.cxf:cxf-rt-transports-jms (2.1.4)

org.apache.cxf:cxf-rt-transports-jms MAVEN version 2.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-transports-jms and may be impacted: - org.apache.camel:camel-example-cxf =1.6.0, =2.0-m1 - org.apache.cxf:apache-cxf 2.1.4 -...

org.apache.camel:camel-example-cxf (1.5.0), org.apache.cxf:cxf-eclipse-plugin (2.1.3) potentially affected by CVE-2025-48913 via org.apache.cxf:cxf-rt-transports-jms (2.1.3)

org.apache.cxf:cxf-rt-transports-jms MAVEN version 2.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-transports-jms and may be impacted: - org.apache.camel:camel-example-cxf 1.5.0 - org.apache.cxf:cxf-eclipse-plugin 2.1.3 Sour...

org.apache.camel:camel-example-cxf (1.6.1), org.apache.cxf:apache-cxf (2.2) +2 more potentially affected by CVE-2025-48913 via org.apache.cxf:cxf-rt-transports-jms (2.2)

org.apache.cxf:cxf-rt-transports-jms MAVEN version 2.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-transports-jms and may be impacted: - org.apache.camel:camel-example-cxf 1.6.1 - org.apache.cxf:apache-cxf 2.2 -...

org.apache.camel:camel-example-cxf (>=1.6.2, <=2.0.0), org.apache.cxf:apache-cxf (2.2.2) +2 more potentially affected by CVE-2025-48913 via org.apache.cxf:cxf-rt-transports-jms (2.2.2)

org.apache.cxf:cxf-rt-transports-jms MAVEN version 2.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-transports-jms and may be impacted: - org.apache.camel:camel-example-cxf =1.6.2, =2.0.0 - org.apache.cxf:apache-cxf 2.2.2 -...

org.apache.camel:camel-example-cxf (2.1.0), org.apache.cxf.systests:cxf-systests-transports (2.2.5) +4 more potentially affected by CVE-2025-48913 via org.apache.cxf:cxf-rt-transports-jms (2.2.5)

org.apache.cxf:cxf-rt-transports-jms MAVEN version 2.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-transports-jms and may be impacted: - org.apache.camel:camel-example-cxf 2.1.0 -...

org.apache.camel:camel-example-cxf (>=1.6.4, <=2.4.0), org.apache.cxf.systests:cxf-systests-jaxrs (2.2.9) +4 more potentially affected by CVE-2025-48913 via org.apache.cxf:cxf-rt-transports-jms (2.2.9)

org.apache.cxf:cxf-rt-transports-jms MAVEN version 2.2.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-transports-jms and may be impacted: - org.apache.camel:camel-example-cxf =1.6.4, =2.4.0 -...

org.apache.camel:camel-example-cxf (>=2.8.4, <=2.8.5), org.apache.cxf.systests:cxf-systests-jaxrs (2.4.6) +8 more potentially affected by CVE-2025-48913 via org.apache.cxf:cxf-rt-transports-jms (2.4.6)

org.apache.cxf:cxf-rt-transports-jms MAVEN version 2.4.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-transports-jms and may be impacted: - org.apache.camel:camel-example-cxf =2.8.4, =4.4.1, =4.4.1, =4.4.2 Source cves:...