512 matches found
CVE-2025-66453 Rhino vulnerable high CPU usage and potential DoS when passing specific numbers to toFixed() function
Rhino is an open-source implementation of JavaScript written entirely in Java. Prior to 1.8.1, 1.7.15.1, and 1.7.14.1, when an application passed an attacker controlled float poing number into the toFixed function, it might lead to high CPU consumption and a potential Denial of Service. Small...
PT-2025-48990
Name of the Vulnerable Software and Affected Versions Rhino versions prior to 1.8.1 Rhino versions prior to 1.7.15.1 Rhino versions prior to 1.7.14.1 Description Rhino is a JavaScript implementation written in Java. Prior to versions 1.8.1, 1.7.15.1, and 1.7.14.1, providing a crafted floating-poi...
EUVD-2025-178447
Malicious code in import-float-omega-user-eta npm...
EUVD-2025-179026
Malicious code in eta-refactor-execute-float-load npm...
EUVD-2025-176753
Malicious code in refactor-signal-float-code-char npm...
EUVD-2025-176390
Malicious code in sigma-byte-minify-cache-float npm...
EUVD-2025-178880
Malicious code in float-rain-finally-yaml-air npm...
EUVD-2025-180488
Malicious code in air-easy-dog-float-interface npm...
EUVD-2025-178513
Malicious code in hot-awk-authorize-float-interface npm...
MAL-2025-189122 Malicious code in refactor-signal-float-code-char (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63bd76bf641eda520b1b2a0dbe0a1b53f6b4fc54d58d3d0fd0530f99af1f492b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-180189
Malicious code in await-float-optimize-route-omicron npm...
EUVD-2025-176420
Malicious code in serialize-short-grep-async-float npm...
EUVD-2025-180144
Malicious code in bad-route-boolean-compress-float npm...
EUVD-2025-178881
Malicious code in float-new-route-benchmark-async npm...
EUVD-2025-179942
Malicious code in bundle-static-pipe-mu-float npm...
EUVD-2025-178085
Malicious code in link-theta-float-class-balance npm...
EUVD-2025-178512
Malicious code in hot-float-moon-unix-fork npm...
EUVD-2025-178883
Malicious code in float-beta-deploy-star-meta npm...