253080 matches found
ECHO-C80E-9875-82A0
Bulletin has no description...
ECHO-B87A-6495-4598 Flagged by review on PR #19827: this ID needs a documented disposition here, not silent removal, since the raw scanner (matching on [email protected]'s version string alone) will otherwise keep reporting it as an open finding forever. Upstream's fix (GHSA-gvgg-2r3r-53x7) closes a path where OrganizationMemberResource trusted a client-session note to determine organization membership, letting a crafted note forge an org claim. 25.0.6's OrganizationMembershipMapper does not have that trust path at all — it always re-verifies membership directly against the organization store (provider.getByMember(user)) rather than trusting anything client- or session-supplied. With no client-session-note-based membership check present, the described forgery has no mechanism to exploit here.
Bulletin has no description...
ECHO-A380-E585-5861
Bulletin has no description...
ECHO-0030-65EC-F55D
Bulletin has no description...
MAL-2026-15581 Malicious code in cloudfcrxz (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1caf6a2a9c9e406a086a5eef2c95f0248003441ebb663fb0fd215aefd9565198 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
MAL-2026-15583 Malicious code in h2-codex (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0176fe223a6df20d633d05a3e0ab21c2e87d0169342e820beadccc5817acc7bc The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
MAL-2026-15585 Malicious code in h3client (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f46b4326d43002283dd4c729f099bd53573ca46f6c706492214d37df4bf6c51b The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
MAL-2026-15580 Malicious code in brat-codex (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56c333154957d5d184f708ad5a73487dedde9f9e3600564467a69d6620a6cc3f The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
MINI-M826-28QR-7WCW
Bulletin has no description...
MINI-XP63-3C6H-36JQ
Bulletin has no description...
MINI-HHQ6-938J-VPCR
Bulletin has no description...
MINI-GXX6-W45Q-8G6M
Bulletin has no description...
MINI-HMQX-JX57-MCV8
Bulletin has no description...
MINI-JG92-PX5F-P49G
Bulletin has no description...
MINI-M7HH-XCXF-848V
Bulletin has no description...
MINI-CRCV-35GV-72V4
Bulletin has no description...
MINI-8784-M5X8-G38R
Bulletin has no description...
MINI-JQFH-XF7V-86GV
Bulletin has no description...