Access Control Bypass

Overview @kottster/cli is a CLI for Kottster Affected versions of this package are vulnerable to Access Control Bypass via the initApp and installPackagesForDataSource actions. An attacker can gain unauthorized administrative access and execute arbitrary system commands by repeatedly triggering...

CVE-2025-62647

The Restaurant Brands International RBI assistant platform through 2025-09-06 provides the functionality of returning a JWT that can be used to call an API to return a signed AWS upload URL, for any store's path...

CVE-2025-62647

The Restaurant Brands International RBI assistant platform through 2025-09-06 provides the functionality of returning a JWT that can be used to call an API to return a signed AWS upload URL, for any store's path...

EUVD-2020-29443

Malware in sbrugna...

EUVD-2018-1923

Malware in sbrugna...

EUVD-2020-18797

Malware in sbrugna...

EUVD-2020-19058

Malware in sbrugna...

EUVD-2021-0792

Malware in sbrugna...

EUVD-2021-2067

Malware in sbrugna...

EUVD-2021-21985

Malware in sbrugna...

EUVD-2020-1445

Malware in sbrugna...

EUVD-2021-26828

Malware in sbrugna...

EUVD-2020-23702

Malware in sbrugna...

EUVD-2021-9336

Malicious code in bioql PyPI...

EUVD-2022-33473

Malicious code in bioql PyPI...

EUVD-2021-34144

Malicious code in bioql PyPI...

EUVD-2025-16789

Malicious code in bioql PyPI...

EUVD-2023-2786

Malicious code in bioql PyPI...

EUVD-2025-20136

Malicious code in bioql PyPI...

EUVD-2024-33919

Malicious code in bioql PyPI...