MAL-2022-2869 Malicious code in ethers-js-snap (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0fed39a2c0c5817dd6ae76956a74c435c13481436cac3eb9d117857ad9be21af Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4478 Malicious code in mapray-js-monorepo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d3ecca8660783a4112ca158dc2fe08c66a1426982b6eb70ed4dd8094ead87466 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ethers-js-snap (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0fed39a2c0c5817dd6ae76956a74c435c13481436cac3eb9d117857ad9be21af Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-XVF7-4V9Q-58W6 Infinite loop in jpeg-js

The package jpeg-js before 0.4.4 is vulnerable to Denial of Service DoS where a particular piece of input will cause the program to enter an infinite loop and never return...

Infinite loop in jpeg-js

The package jpeg-js before 0.4.4 is vulnerable to Denial of Service DoS where a particular piece of input will cause the program to enter an infinite loop and never return...

CVE-2022-25851

The package jpeg-js before 0.4.4 are vulnerable to Denial of Service DoS where a particular piece of input will cause to enter an infinite loop and never return...

Design/Logic Flaw

The package jpeg-js before 0.4.4 are vulnerable to Denial of Service DoS where a particular piece of input will cause to enter an infinite loop and never return...

CVE-2022-25851 Denial of Service (DoS)

The package jpeg-js before 0.4.4 are vulnerable to Denial of Service DoS where a particular piece of input will cause to enter an infinite loop and never return...

CVE-2022-25851 Denial of Service (DoS)

The package jpeg-js before 0.4.4 are vulnerable to Denial of Service DoS where a particular piece of input will cause to enter an infinite loop and never return...

CVE-2022-25851

CVE-2022-25851 affects the jpeg-js package prior to 0.4.4, with a Denial of Service caused by improper input validation that can trigger an infinite loop. IBM’s security bulletin clarifies impact to IBM Edge Application Manager (versions 4.3 and 4.4) and notes the existence of fixes via a docker ...

CVE-2022-25851

The package jpeg-js before 0.4.4 are vulnerable to Denial of Service DoS where a particular piece of input will cause to enter an infinite loop and never return...

jpeg-js 安全漏洞

jpeg-js is a JavaScript-based image processing program . A denial of service vulnerability exists in versions of jpeg-js prior to 0.4.4, which can be exploited by an attacker to conduct a DoS attack, as inputting a specific file will result in entering an infinite loop and never returning...

MAL-2022-6791 Malicious code in universal-authenticator-library-js-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 634c9abec0578ad529a15e3faab7ef695e47e5a1b95299329e27a8ca7e00e22f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2679 Malicious code in eg-clickstream-sdk-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0705bae9b8b83918363a34220367ce898de3e491c1f68e183ed880048b2f9d95 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eg-clickstream-sdk-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0705bae9b8b83918363a34220367ce898de3e491c1f68e183ed880048b2f9d95 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in discord-js-v13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware efa16d135ce14e2cecb4cc4203b19a8ea5dde2ad02b34a62403aa10036938d20 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2483 Malicious code in discord-js-v13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware efa16d135ce14e2cecb4cc4203b19a8ea5dde2ad02b34a62403aa10036938d20 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

nodejs-json-schema: Prototype pollution vulnerability

The json-schema Node.JS library was vulnerable to prototype pollution during the validation of a JSON object. An attacker, able to provide a specially crafted JSON file for validation, could use this flaw to modify the behavior of the node program, to, for example, execute arbitrary code...

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS where a particular piece of input will cause to enter an infinite loop and never return. PoC 1 Create a npm workspace npm init 2 Install the jpeg-js library 3 Create a JS file with the following code: js const jpeg...

Arbitrary Code Injection

gatsby-plugin-mdx is vulnerable to arbitrary code injection. The vulnerability exists because the gatsby-plugin-mdx allows JS engine for frontmatter by default due to untrusted inputs which allows an attacker to inject arbitrary codes...