28 matches found
Malicious code in starlette-healthchecks (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eebffb3f581b979c3e9a1dc0aef347111b50922326b2181cc9d2bc009c4e7021 The package advertises itself as ASGI healthcheck/logging middleware, but its documented entry point configurelogging re-exported from...
MAL-2026-16356 Malicious code in starlette-healthchecks (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eebffb3f581b979c3e9a1dc0aef347111b50922326b2181cc9d2bc009c4e7021 The package advertises itself as ASGI healthcheck/logging middleware, but its documented entry point configurelogging re-exported from...
OAuth2 Proxy's Health Check User-Agent Matching Bypasses Authentication in auth_request Mode
Impact A configuration-dependent authentication bypass exists in OAuth2 Proxy. Deployments are affected when all of the following are true: - OAuth2 Proxy is used with an authrequest-style integration for example, nginx authrequest - --ping-user-agent is set or --gcp-healthchecks is enabled In...
EUVD-2023-12494
Malicious code in bioql PyPI...
Malicious code in rxnt-healthchecks-nestjs (npm)
The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 91466f0176011b114548780f79ecab9da3b995e89243c07548ea8be6e4a7b0d9 Any computer that has this package installed or running should be considered fully compromised. All...
MAL-2025-47346 Malicious code in rxnt-healthchecks-nestjs (npm)
The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 91466f0176011b114548780f79ecab9da3b995e89243c07548ea8be6e4a7b0d9 Any computer that has this package installed or running should be considered fully compromised. All...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. Compromised versions of this package contain a file called bundle.js that exfiltrates secrets from the user's accounts, including credentials and API tokens. It also downloads malicious files and repackages them...
CVE-2023-0440
Observable Discrepancy in GitHub repository healthchecks/healthchecks prior to v2.6...
Dapr API token authentication bypass in HTTP endpoints
Summary A vulnerability has been found in Dapr that allows bypassing API token authentication, which is used by the Dapr sidecar to authenticate calls coming from the application, with a well-crafted HTTP request. Users who leverage API token authentication are encouraged to upgrade Dapr to 1.10....
CVE-2023-0440
Observable Discrepancy in GitHub repository healthchecks/healthchecks prior to v2.6...
Buffer overflow
Observable Discrepancy in GitHub repository healthchecks/healthchecks prior to v2.6...
CVE-2023-0440 Observable Discrepancy in healthchecks/healthchecks
Observable Discrepancy in GitHub repository healthchecks/healthchecks prior to v2.6...
CVE-2023-0440: Observable Discrepancy
Observable Discrepancy in GitHub repository healthchecks/healthchecks prior to v2.6...
PT-2023-16271 · Unknown · Healthchecks
Name of the Vulnerable Software and Affected Versions: healthchecks/healthchecks versions prior to 2.6 Description: The issue concerns an observable discrepancy in the healthchecks/healthchecks GitHub repository, which can lead to the exposure of sensitive information to unauthorized actors...
CVE-2023-0440 Observable Discrepancy in healthchecks/healthchecks
Observable Discrepancy in GitHub repository healthchecks/healthchecks prior to v2.6...
Healthchecks 信息泄露漏洞
SIA Monkey See Monkey Do Healthchecks is a cron job monitoring service from SIA Monkey See Monkey Do. An information disclosure vulnerability exists in versions prior to Healthchecks v2.6, which stems from the exposure of sensitive information to unauthorized participants...
CVE-2023-0440 Observable Discrepancy in healthchecks/healthchecks
Observable Discrepancy in GitHub repository healthchecks/healthchecks prior to v2.6...
CVE-2023-0440
The CVE-2023-0440 entry concerns healthchecks/healthchecks before version 2.6. The issue is described as an observable discrepancy that can expose sensitive information to unauthorized actors. Affected software is Healthchecks (healthchecks/healthchecks); versions prior to 2.6 are vulnerable. Mit...
container-tools:2.0 bug fix update
The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Bug Fixes: podman: Please backport correction patch for the native container healthchecks BZ1836978...
ALBA-2020:2457 container-tools:2.0 bug fix update
The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Bug Fixes: podman: Please backport correction patch for the native container healthchecks BZ1836978...