GHSA-86C6-3G63-5W64 vulnerabilities

Vulnerabilities for packages: k3d...

GHSA-86C6-3G63-5W64 vulnerabilities

Vulnerabilities for packages: k3d...

@deploysentinel/playwright-watch (>=0.1.0, <=0.2.2), @finsemble/finsemble-core (>=1.0.0-beta-9, <=8.7.0) +9 more potentially affected by CVE-2023-5217 via electron (>=22.0.0, <=22.3.13)

electron NPM version =22.0.0, =0.1.0, =1.0.0-beta-9, =1.0.0-beta-9, =9.13.1, =60.0.0-pre1, =0.0.1-alpha.2022-12-11.1670718306317, =1.3.0, =0.0.87, =2.0.92, =2.0.98 Source cves: CVE-2023-5217 Source advisory: OSV:GHSA-QQVQ-6XGJ-JW8G...

Imageflow affected by libwebp zero-day and should not be used with malicious source images.

Impact This vulnerability affects deployments of Imageflow that involve decoding or processing malicious source .webp files. If you only process your own trusted files, this should not affect you but you should update anyway. Imageflow relies on Google's libwebp library to decode .webp images, an...

GHSA-55G7-9CWV-5QFV vulnerabilities

Vulnerabilities for packages: druid...

GHSA-9MCR-873M-XCXP vulnerabilities

Vulnerabilities for packages: zed...

GHSA-7MP6-929P-PQHJ vulnerabilities

Vulnerabilities for packages: croc...

GHSA-PPJH-XP5V-46WC vulnerabilities

Vulnerabilities for packages: croc...

GHSA-364C-VVQX-446C vulnerabilities

Vulnerabilities for packages: croc...

Eclipse Jetty HTTP Header Vulnerability (GHSA-hmr7-m48g-48f6) - Linux

Eclipse Jetty is prone to an HTTP header vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:eclipse:jetty";...

Eclipse Jetty HTTP Header Vulnerability (GHSA-hmr7-m48g-48f6) - Windows

Eclipse Jetty is prone to an HTTP header vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:eclipse:jetty";...

Eclipse Jetty CgiServlet Vulnerability (GHSA-3gh6-v5v9-6v9j) - Windows

Eclipse Jetty is prone to a vulnerability in the CgiServlet. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:eclipse:jetty";...

Eclipse Jetty OpenID Vulnerability (GHSA-pwh8-58vv-vw48) - Windows

Eclipse Jetty is prone to a vulnerability in OpenIdAuthenticator. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:eclipse:jetty";...

Eclipse Jetty CgiServlet Vulnerability (GHSA-3gh6-v5v9-6v9j) - Linux

Eclipse Jetty is prone to a vulnerability in the CgiServlet. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:eclipse:jetty";...

Malicious code in fca-nvt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f96380ff5d08b4a65d9a20156bb99f8945ff4b34487354b250d78b583013b8d0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-PWH8-58VV-VW48 vulnerabilities

Vulnerabilities for packages: cloudwatch-exporter...

GHSA-V84F-6R39-CPFC vulnerabilities

Vulnerabilities for packages: vault...

GHSA-3GH6-V5V9-6V9J vulnerabilities

Vulnerabilities for packages: cloudwatch-exporter, cassandra-reaper...

GHSA-CGWF-W82Q-5JRR vulnerabilities

Vulnerabilities for packages: opensearch, trino...

MAL-2023-8105 Malicious code in purplebricks-frontend-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f8044c661c6223ef46436635423b8c74bbebf2796ae2252435a5592288dceca7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...