elemeno-ai-sdk (>=0.0.77 <=0.6.11), elemeno-mlops-cli (>=0.0.1 <=0.0.4) +12 more potentially affected by unknown CVE via feast (>=0.14.1 <=0.39.1)

feast PYPI version =0.14.1, =0.0.77, =0.0.1, =0.1.0, =0.3.0, =0.0.2, =1.0.0, =0.1.0, =0.0.1, =0.0.23 Source cves: unknown CVE Source advisory: SNYK:PYTHON-FEAST-8400488...

Cross-site Scripting (XSS)

Overview feast is a Python SDK for Feast Affected versions of this package are vulnerable to Cross-site Scripting XSS in Jinja2 Environment. Details Cross-site scripting or XSS is a code vulnerability that occurs when an attacker “injects” a malicious script into an otherwise trusted website. The...

MAL-2022-2993 Malicious code in feast-svg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3e6479c56289654bbc558ea4a0c5190871258655ce3fa766da8a33493aa24269 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in feast-svg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3e6479c56289654bbc558ea4a0c5190871258655ce3fa766da8a33493aa24269 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in feast-css (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a9020fe08dcbac061c9250afcb7701400417ae8dcde091ca3474f8b54a8ad8cd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Gummy's Thanksgiving Feast - Base64 encoded String, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Gummy's Thanksgiving Feast published at the 'play' market has multiple vulnerabilities...