MAL-2025-26695 Malicious code in moonstone-shtxx-lravh-glow-project (npm)

The package moonstone-shtxx-lravh-glow-project was found to contain malicious code...

MAL-2025-17676 Malicious code in crescent-nxzg9-fx27o-glow-project (npm)

The package crescent-nxzg9-fx27o-glow-project was found to contain malicious code...

MAL-2025-22237 Malicious code in harp-8dtdy-0fmvk-glow-project (npm)

The package harp-8dtdy-0fmvk-glow-project was found to contain malicious code...

MAL-2025-21591 Malicious code in glow-earvq-vrre5-quiver-project (npm)

The package glow-earvq-vrre5-quiver-project was found to contain malicious code...

MAL-2025-21596 Malicious code in glow-os232-pbc9r-yellow-project (npm)

The package glow-os232-pbc9r-yellow-project was found to contain malicious code...

MAL-2025-21595 Malicious code in glow-m7ob1-tgmj0-raven-project (npm)

The package glow-m7ob1-tgmj0-raven-project was found to contain malicious code...

[SECURITY] Fedora 41 Update: glow-2.1.1-1.fc41

Glow is a terminal based markdown reader designed from the ground up to bring out the beauty=E2=80=94and power=E2=80=94of the CLI. Use it to discover mark down files, read documentation directly on the command line. Glow will find local markdown files in subdirectories or a local Git repository...

Fedora 41 : glow (2025-0f0b3d191c)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-0f0b3d191c advisory. Update to version 2.1.1 for various bugfixes. This also fixes CVE-2025-22872 in the bundled golang.org/x/net/html. Tenable has extracted the preceding...

Fedora: Security Advisory (FEDORA-2025-e023994b32)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2025-0f0b3d191c)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 42 : glow (2025-e023994b32)

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-e023994b32 advisory. Update to version 2.1.1 for various bugfixes. This also fixes CVE-2025-22872 in the bundled golang.org/x/net/html. Tenable has extracted the preceding...

glow-2.1.0-2.1 on GA media (moderate)

glow-2.1.0-2.1 on GA media Announcement ID: openSUSE-SU-2025:15036-1 Rating: moderate Cross-References: CVE-2025-22872 CVSS scores: CVE-2025-22872 SUSE : 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L CVE-2025-22872 SUSE : 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L...

OPENSUSE-SU-2025:15036-1 glow-2.1.0-2.1 on GA media

These are all security issues fixed in the glow-2.1.0-2.1 package on the GA media of openSUSE Tumbleweed...

@glow-app/solana-client (>=0.4.0 <=0.5.1), @zetamarkets/flex-sdk (>=0.6.3 <=0.15.0) +8 more potentially affected by CVE-2024-30253 via @solana/web3.js (>=1.43.4 <=1.43.6)

@solana/web3.js NPM version =1.43.4, =0.4.0, =0.6.3, =0.1.1, =0.0.1, =1.4.0, =0.1.0, =1.0.4, =1.4.1 Source cves: CVE-2024-30253 Source advisory: OSV:GHSA-8M45-2RJM-J347...

@glow-app/glow-react (>=0.6.0 <=1.0.1), @glow-app/solana-client (>=0.5.2 <=1.0.4) +17 more potentially affected by CVE-2024-30253 via @solana/web3.js (>=1.44.0 <=1.44.2)

@solana/web3.js NPM version =1.44.0, =0.6.0, =0.5.2, =1.1.0, =0.1.0, =1.0.5, =4.1.2, =4.1.3, =4.1.3, =0.1.20, =0.2.40, =3.2.0, =0.0.50, =0.1.0, =0.1.2 and more Source cves: CVE-2024-30253 Source advisory: OSV:GHSA-8M45-2RJM-J347...

glow-project.eu Improper Access Control vulnerability OBB-3824570

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

active.com XSS vulnerability

Vulnerable URL: http://www.active.com/glow-run?category="'--! Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 8916 VIP website status:| Yes Check active.com SSL connection:| Grade: ...

Glow Hockey 2 - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Glow Hockey 2 published at the 'play' market has multiple vulnerabilities...

Glow Hockey - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Glow Hockey published at the 'play' market has multiple vulnerabilities...

Doodle Fire! Kids Glow Draw! - Dynamic Code Loading, External URLs, Possible privilege escalation vulnerabilities

HackApp vulnerability scanner discovered that application Doodle Fire! Kids Glow Draw! published at the 'play' market has multiple vulnerabilities...