External Control of File Name or Path

Overview @pnpm/bins.resolver is a Returns bins of a package Affected versions of this package are vulnerable to External Control of File Name or Path through the handling of reserved or malformed bin names during global package operations. An attacker can cause deletion of critical directories...

MAL-2025-37702 Malicious code in umbriel-ceres-elara-global (npm)

The package umbriel-ceres-elara-global was found to contain malicious code...

Malicious code in local-modules-as-global (npm)

The package local-modules-as-global was found to contain malicious code...

Malicious code in consumer-platform-global-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 673a0b607ba1bc6ba23ef4cb90ce7b66e03db02b377733960c524cf6757b4c61 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

OPENSUSE-SU-2024:10793-1 global-6.6.6-1.3 on GA media

These are all security issues fixed in the global-6.6.6-1.3 package on the GA media of openSUSE Tumbleweed...

Malicious code in ae-global (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6a3fa04a259a35253dd065c75cb9e80dad393242e39fa212d6941960ba2e19f0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Security Advisory YYYY-NNN

-----BEGIN PGP SIGNED MESSAGE----- NetBSD Security Advisory 2000-014 ================================= Topic: Global-3.55 allows world-wide executable cgi. Version: any before 4.01 Severity: permits remote execution of arbitrary shell commands Abstract ======== When using the CGI interface of the...