MAL-2025-190594 Malicious code in @ra-ide/source-code-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21b026a3f908a4875695a81716cd5056c2991f150b9661187eeebd42cdc8577b The package @ra-ide/source-code-frontend was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-190597 Malicious code in @ra-ide/tag-editor-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c33209550ea4f214f4a53a91ca86598ef1ba273d7dae04de11effd081d8cd75 The package @ra-ide/tag-editor-frontend was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in @ra-ide/tag-editor-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c33209550ea4f214f4a53a91ca86598ef1ba273d7dae04de11effd081d8cd75 The package @ra-ide/tag-editor-frontend was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-190595 Malicious code in @ra-ide/st-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49ae7d07061ce406d972052f23649e631bb22f724cd85c8ab0c73b18689ecb36 The package @ra-ide/st-frontend was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-190590 Malicious code in @ra-ide/code-editor-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39784fd9275723725034c0f9fcb2df35d06963659572a3aeaccd51e3a5e07e61 The package @ra-ide/code-editor-frontend was found to contain malicious code. Source: ossf-package-analysis...

EUVD-2025-198327

Malicious code in @ra-ide/st-frontend npm...

Malicious code in @ra-ide/st-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49ae7d07061ce406d972052f23649e631bb22f724cd85c8ab0c73b18689ecb36 The package @ra-ide/st-frontend was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in @ra-ide/ld-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aec551eb9431424b0e79cb127427880ebd5c21b9deb2b8d4a378fb650fb45a84 The package @ra-ide/ld-frontend was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-190592 Malicious code in @ra-ide/ld-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aec551eb9431424b0e79cb127427880ebd5c21b9deb2b8d4a378fb650fb45a84 The package @ra-ide/ld-frontend was found to contain malicious code. Source: ossf-package-analysis...

EUVD-2025-198329

Malicious code in @ra-ide/ld-frontend npm...

CVE-2025-63848

Stored cross site scripting xss vulnerability in SWISH prolog thru 2.2.0 allowing attackers to execute arbitrary code via crafted web IDE notebook...

CVE-2025-63848

The CVE-2025-63848 entry describes a stored XSS vulnerability in SWISH (SWI‑Prolog SWISH Web IDE) up to version 2.2.0. The issue allows an attacker to execute arbitrary code via a crafted notebook in the Web IDE, indicating code execution impact tied to the web interface. Affected component: SWIS...

PT-2025-47605

Name of the Vulnerable Software and Affected Versions SWISH prolog versions through 2.2.0 Description A stored cross site scripting issue exists in SWISH prolog through version 2.2.0. This allows attackers to execute arbitrary code through a specially crafted web IDE notebook. The issue involves...

Security Bulletin: Due to use of the sha.js library, IBM watsonx Code Assistant IDE Extensions is affected by Improper Input Validation vulnerability

Summary Sha.js is used internally by IBM watsonx Code Assistant IDE Extensions CVE-2025-9288 Vulnerability Details CVEID:CVE-2025-9288 DESCRIPTION: Improper Input Validation vulnerability in sha.js allows Input Data Manipulation.This issue affects sha.js: through 2.4.11. CWE:CWE-20: Improper Inpu...

CVE-2025-8386

The vulnerability, if exploited, could allow an authenticated miscreant with privilege of "aaConfigTools" to tamper with App Objects' help files and persist a cross-site scripting XSS injection that when executed by a victim user, can result in horizontal or vertical escalation of privileges. The...

CVE-2025-8386

The vulnerability, if exploited, could allow an authenticated miscreant with privilege of "aaConfigTools" to tamper with App Objects' help files and persist a cross-site scripting XSS injection that when executed by a victim user, can result in horizontal or vertical escalation of privileges. The...

EUVD-2025-197662

The vulnerability, if exploited, could allow an authenticated miscreant with privilege of "aaConfigTools" to tamper with App Objects' help files and persist a cross-site scripting XSS injection that when executed by a victim user, can result in horizontal or vertical escalation of privileges. The...

CVE-2025-8386 AVEVA Application Server IDE Basic Cross-site Scripting

The vulnerability, if exploited, could allow an authenticated miscreant with privilege of "aaConfigTools" to tamper with App Objects' help files and persist a cross-site scripting XSS injection that when executed by a victim user, can result in horizontal or vertical escalation of privileges. The...

PT-2025-47034

Name of the Vulnerable Software and Affected Versions Application Server affected versions not specified Description An authenticated attacker with “aaConfigTools” privilege can modify App Objects’ help files, potentially leading to a persistent cross-site scripting XSS injection. Successful...

AVEVA Application Server IDE

RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to tamper with help files and inject cross-site scripting XSS code. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability, such as:...