parse-url 代码问题漏洞

parse-url is an advanced url parser with git url support from the individual developer Ionică Bizău. A code issue vulnerability exists in parse-url versions prior to 7.0.0, which stems from improper handling of usernames and passwords, undetected hostnames, and can be exploited by an attacker to...

Malicious Package

Overview git-gatsby is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

Malicious Package

Overview git-dependency-maker is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

Malicious Package

Overview lbc-git is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

Malicious Package

Overview git-en-boite-app is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Note: This malicious package was uncovered by one ...

Malicious Package

Overview git-en-boite-core is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Note: This malicious package was uncovered by one...

Security fix for the ALT Linux 10 package git version 2.33.4-alt1

June 23, 2022 Dmitry V. Levin 2.33.4-alt1 - 2.33.3 - 2.33.4 fixes: CVE-2022-29187...

Red Hat OpenShift 资源管理错误漏洞

Red Hat OpenShift is a Platform-as-a-Service PaaS cloud computing platform from Red Hat, Inc. that supports building, testing, deploying, and running applications. Red Hat OpenShift GitOps 1.5 suffers from a resource management error vulnerability that stems from vulnerability to uncontrolled...

EulerOS 2.0 SP8 : git (EulerOS-SA-2022-1929)

According to the versions of the git packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Git for Windows is a fork of Git containing Windows-specific patches. This vulnerability affects users working on multi-user machines, where...

Red Hat OpenShift 后置链接漏洞

Red Hat OpenShift is a Platform-as-a-Service PaaS cloud computing platform from Red Hat, Inc. that supports building, testing, deploying and running applications. A security vulnerability exists in Red Hat OpenShift GitOps 1.5 that stems from vulnerability to symbolic links, which can be exploite...

Huawei EulerOS: Security Advisory for git (EulerOS-SA-2022-1929)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Malicious code in com.unity.git (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ed428cb13166bfbc31992104bb11a78cd854b29fc1a99132fdf18b346563c617 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in com.unity.git.api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6ed2760b4ec200a5403c5cdc919864744dd932e59f73c2a36e22bb5c4f99462a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in com.unity.git.ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4db1eaca0dc0d3787573bd0324fbd4be1d35969df24ad4ccd257f1e20804a561 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in git-en-boite-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d2a28164e7297d1f76fb0f0a2321f9be542603117591c9d910bd5edb6b7add66 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in git-en-boite-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e4f46bbf079b977deefeb78d8bf3c63587df8e512096be79aa8e7decc4c95083 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3368 Malicious code in git-en-boite-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e4f46bbf079b977deefeb78d8bf3c63587df8e512096be79aa8e7decc4c95083 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3367 Malicious code in git-dependency-maker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c9b4a87b0253efbaf0122b94b2b942adc6b9163f8161863bb0d334859bb9f87 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in git-dependency-maker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c9b4a87b0253efbaf0122b94b2b942adc6b9163f8161863bb0d334859bb9f87 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in git-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0f08a6b8256f7c6e7f8805977bc211518eaed18aab87b09a573d517a26ae9856 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...