PT-2026-75127

TuxCare rebuilt gh-pages to address 1 CVE. Fixed in 0.12.0-tuxcare.1...

PT-2024-27804

Name of the Vulnerable Software and Affected Versions TWCMS version 2.0.3 Description The issue allows a remote attacker to execute arbitrary code. This is achieved via the "/TWCMS-gh-pages/twcms/runtime/twcms view/default,index.htm.php" endpoint, where PHP directly echoes parameters input from...

tschaub gh-pages vulnerable to prototype pollution

Prototype pollution vulnerability in tschaub gh-pages via the partial variable in util.js...

GHSA-8MMM-9V2Q-X3F9 tschaub gh-pages vulnerable to prototype pollution

Prototype pollution vulnerability in tschaub gh-pages via the partial variable in util.js...

CVE-2022-37611

Prototype pollution vulnerability in tschaub gh-pages 3.1.0 via the partial variable in util.js...

Code injection

Prototype pollution vulnerability in tschaub gh-pages 3.1.0 via the partial variable in util.js...

CVE-2022-37611

Prototype pollution vulnerability in tschaub gh-pages 3.1.0 via the partial variable in util.js...

gh-pages security vulnerability

gh-pages is a general-purpose task for Tim Schaub's personal developer to publish files to the gh-pages branch on GitHub. A security vulnerability exists in gh-pages version 3.1.0, which stems from a prototype contamination vulnerability via some variables in util.js...

CVE-2022-37611: Improperly Controlled Modification of Object Prototype Attributes

Prototype pollution vulnerability in tschaub gh-pages 3.1.0 via the partial variable in util.js...

0xgank-tea-advice-pull (1.0.0), 0xgank-tea-balance-pencil (1.0.0) +2198 more potentially affected by CVE-2022-37611 via gh-pages (>=0.2.0, <=4.0.0)

gh-pages NPM version =0.2.0, =4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on gh-pages and may be impacted: - 0xgank-tea-advice-pull 1.0.0 - 0xgank-tea-balance-pencil 1.0.0 - 0xgank-tea-brick-bell 1.0.0 - 0xgank-tea-cake-victory 1.0.0 -...

CVE-2022-37611

Prototype pollution vulnerability in tschaub gh-pages 3.1.0 via the partial variable in util.js...

CVE-2022-37611

The CVE-2022-37611 entry documents a prototype pollution vulnerability in tschaub gh-pages version 3.1.0, caused by unsafe handling of the partial variable in util.js. The root cause is lack of validation on the partial property, enabling an attacker to contaminate a JavaScript object prototype. ...

CVE-2022-37611

Prototype pollution vulnerability in tschaub gh-pages 3.1.0 via the partial variable in util.js...

CVE-2022-37611

Prototype pollution vulnerability in tschaub gh-pages 3.1.0 via the partial variable in util.js...

PT-2022-24026 · Unknown · Tschaub Gh-Pages

Name of the Vulnerable Software and Affected Versions: tschaub gh-pages version 3.1.0 Description: The issue is related to a prototype pollution vulnerability. It is exploited via the partial variable in util.js. Recommendations: For tschaub gh-pages version 3.1.0, consider restricting access to...

MAL-2022-833 Malicious code in action-publish-gh-pages (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2a74ffd02c6f641086cd42add073f54fb155173390cde20c495999e563ff0471 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in action-publish-gh-pages (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2a74ffd02c6f641086cd42add073f54fb155173390cde20c495999e563ff0471 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-RRJ3-QMH8-72PF grunt-gh-pages before 0.10.0 may allow unencrypted GitHub credentials to be written to a log file

Versions of grunt-gh-pages prior to 0.10.0 are affected by a vulnerability which may cause unencrypted GitHub credentials to be written to a log file in certain circumstances. In the grunt-gh-pages deployment scenario where authentication is performed by injecting a GitHub token directly into the...

grunt-library-builder (>=0.0.2, <=0.2.2), happyplan (>=0.3.0-beta.7, <=0.4.1) +5 more potentially affected by CVE-2016-10526 via grunt-gh-pages (>=0.7.6, <=0.9.1)

grunt-gh-pages NPM version =0.7.6, =0.0.2, =0.3.0-beta.7, =0.3.0, =0.4.5, =0.14.7 Source cves: CVE-2016-10526 Source advisory: GHSA-RRJ3-QMH8-72PF...

grunt-library-builder (>=0.0.2, <=0.2.2), happyplan (>=0.3.0-beta.7, <=0.4.1) +5 more potentially affected by CVE-2016-10526 via grunt-gh-pages (>=0.7.6, <=0.9.1)

grunt-gh-pages NPM version =0.7.6, =0.0.2, =0.3.0-beta.7, =0.3.0, =0.4.5, =0.14.7 Source cves: CVE-2016-10526 Source advisory: OSV:GHSA-RRJ3-QMH8-72PF...