CVE-2024-37145

Flowise is a drag & drop user interface to build a customized large language model flow. In version 1.4.3 of Flowise, a reflected cross-site scripting vulnerability occurs in the /api/v1/chatflows-streaming/id endpoint. If the default configuration is used unauthenticated, an attacker may be able...

Use After Free

@fastly/js-compute is vulnerable to Use After Free. The vulnerability is due to re-use of previously freed memory in the FetchEvent.client and certain CacheEntry.prototype and Device.lookup functions. This issue could allow for an unintended data leak and often results in a Compute service crash...

CVE-2024-38375 @fastly/js-compute use-after-free in some host call implementations

@fastly/js-compute is a JavaScript SDK and runtime for building Fastly Compute applications. The implementation of several functions were determined to include a use-after-free bug. This bug could allow for unintended data loss if the result of the preceding functions were sent anywhere else, and...

Fastly js-compute-runtime security vulnerability

Fastly js-compute-runtime is a Fastly open source runtime environment. A security vulnerability exists in Fastly js-compute-runtime, which stems from the implementation of multiple functions containing post-release reuse vulnerabilities...

Malicious code in symbl-js (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-3073 Malicious code in symbl-js (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2656 Malicious code in meechum-user-lib-js (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in gtm-js (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2442 Malicious code in gtm-js (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in discord.js-invites (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-1958 Malicious code in cc-libraries-js (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in cc-libraries-js (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in 33-js-concepts (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-1700 Malicious code in 33-js-concepts (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-1983 Malicious code in @store-sfdcbt-net/cicd_gulp-central-js-lib-v1 (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2490 Malicious code in @hweb/hua-js (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @hweb/hua-js (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2033 Malicious code in @ably-forks/crypto-js (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @ably-forks/crypto-js (npm)

--- -= Per source details. Do not edit below this line.=-...

AZL-45066 CVE-2024-37890 affecting package js-jquery 3.5.0-4

ws is an open source WebSocket client and server for Node.js. A request with a number of headers exceeding theserver.maxHeadersCount threshold could be used to crash a ws server. The vulnerability was fixed in [email protected] e55e510 and backported to [email protected] 22c2876, [email protected] eeb76d3, and [email protected]...