CVE-2026-14199

On instances using Auth Proxy header authentication auth.proxy with identity caching enabled syncttl 0, two distinct user identities could produce the same cache key. An authenticated low-privileged user able to influence their own forwarded identity attributes could be served a higher-privileged...

Malicious code in identity_cache (npm)

The package identitycache was found to contain malicious code...

MAL-2025-22968 Malicious code in identity_cache (npm)

The package identitycache was found to contain malicious code...

Malicious code in identity-cache-persistence (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8259c2aadad7b30a1e3d338da740be244e0d875364052d8e41849503366503f5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3768 Malicious code in identity-cache-persistence (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8259c2aadad7b30a1e3d338da740be244e0d875364052d8e41849503366503f5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...