89 matches found
MAL-2025-7996 Malicious code in @hey-amplify/scripts (npm)
The package @hey-amplify/scripts was found to contain malicious code...
Malicious code in @hey-amplify/scripts (npm)
The package @hey-amplify/scripts was found to contain malicious code...
MAL-2025-10079 Malicious code in @zalastax/nolb-_hey (npm)
The package @zalastax/nolb-hey was found to contain malicious code...
Basecamp: Two click Account Takeover
A vulnerability was discovered in the HEY Email Android application that allowed for a two-click account takeover. Improper handling of incoming deeplinks led to the application's authorization bearer token being sent to an attacker-controlled server if the user could be tricked into clicking a...
Basecamp: Critical Data Breach - Big Data for all domains
The researcher provided an Excel sheet that appeared to be a dump of a breach database. The origin of the data entries in the database was unclear. A small number of valid HEY accounts with enabled 2FA were found, as well as a slightly larger number of other product accounts with valid passwords...
Alarm system cyberattack leaves those in need struggling to call for help
An alarm system company that allows those in need to ask for help at the touch of a button has suffered a cyberattack, causing serious disruption. Tunstall Netherlands says the attack left the control room struggling to receive distress calls from clients on Sunday November 12, 2023. Tunstall,...
GHSA-QPPJ-FM5R-HXR3 vulnerabilities
Vulnerabilities for packages: prometheus-adapter, mc, secrets-store-csi-driver, flux-notification-controller, bom, nginx-stable, cue, metrics-server, gobuster, nghttp2, pulumi-language-dotnet, terraform-provider-sendgrid, kind, terraform, dex, flux-helm-controller, ko, aactl,...
futamata (0.0.36), hey-you (>=4.1.5, <=4.1.7) +1 more potentially affected by CVE-2023-29198 via electron (24.0.0)
electron NPM version 24.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on electron and may be impacted: - futamata 0.0.36 - hey-you =4.1.5, =0.0.31, =0.0.33 Source cves: CVE-2023-29198 Source advisory: OSV:GHSA-P7V2-P9M8-QQG7...
CVE-2022-41723 vulnerabilities
Vulnerabilities for packages: terraform-provider-sendgrid, dynamic-localpv-provisioner-fips, terraform-provider-sendgrid-fips, restic, gke-gcloud-auth-plugin, kubeflow, kubeflow-fips, dynamic-localpv-provisioner, wireguard-go, go, hey, kubeflow-katib, grpcurl, kube-state-metrics, k3d...
GHSA-VVPX-J8F3-3W6H vulnerabilities
Vulnerabilities for packages: terraform-provider-sendgrid, dynamic-localpv-provisioner-fips, terraform-provider-sendgrid-fips, restic, gke-gcloud-auth-plugin, kubeflow, kubeflow-fips, dynamic-localpv-provisioner, wireguard-go, go, hey, kubeflow-katib, grpcurl, kube-state-metrics, k3d...
CVE-2021-38561 vulnerabilities
Vulnerabilities for packages: dynamic-localpv-provisioner, vt-cli, terraform-provider-sendgrid, hey, k3d, gitleaks...
CVE-2021-38561 vulnerabilities
Vulnerabilities for packages: terraform-provider-sendgrid, dynamic-localpv-provisioner-fips, terraform-provider-sendgrid-fips, dynamic-localpv-provisioner, gitleaks, hey, vt-cli, k3d...
GHSA-69CH-W2M2-3VJP vulnerabilities
Vulnerabilities for packages: kubeflow, dynamic-localpv-provisioner, vt-cli, grpcurl, terraform-provider-sendgrid, hey, php-fpmexporter, k3d, gitleaks...
CVE-2022-32149 vulnerabilities
Vulnerabilities for packages: kubeflow, dynamic-localpv-provisioner, vt-cli, grpcurl, terraform-provider-sendgrid, hey, php-fpmexporter, k3d, gitleaks...
GHSA-69CG-P879-7622 vulnerabilities
Vulnerabilities for packages: kubeflow-katib, wireguard-go, kubeflow, dynamic-localpv-provisioner, grpcurl, terraform-provider-sendgrid, hey, k3d...
GHSA-69CG-P879-7622 vulnerabilities
Vulnerabilities for packages: terraform-provider-sendgrid, dynamic-localpv-provisioner-fips, terraform-provider-sendgrid-fips, kubeflow, kubeflow-fips, dynamic-localpv-provisioner, wireguard-go, hey, kubeflow-katib, grpcurl, kube-state-metrics, k3d...
CVE-2022-27664 vulnerabilities
Vulnerabilities for packages: kubeflow-katib, wireguard-go, kubeflow, dynamic-localpv-provisioner, grpcurl, terraform-provider-sendgrid, hey, k3d...
CVE-2022-27664 vulnerabilities
Vulnerabilities for packages: terraform-provider-sendgrid, dynamic-localpv-provisioner-fips, terraform-provider-sendgrid-fips, kubeflow, kubeflow-fips, dynamic-localpv-provisioner, wireguard-go, hey, kubeflow-katib, grpcurl, kube-state-metrics, k3d...