19 matches found
EUVD-2022-3481
Malicious code in bioql PyPI...
MAL-2025-42479 Malicious code in @ellentorg/literate (npm)
The package @ellentorg/literate was found to contain malicious code...
Malicious code in @ellentorg/literate (npm)
The package @ellentorg/literate was found to contain malicious code...
Malicious code in @npmteanew/literate-enigma (npm)
The package @npmteanew/literate-enigma was found to contain malicious code...
MAL-2025-9132 Malicious code in @npmteanew/literate-enigma (npm)
The package @npmteanew/literate-enigma was found to contain malicious code...
MAL-2025-9688 Malicious code in @womorg/literate-octo (npm)
The package @womorg/literate-octo was found to contain malicious code...
CVE-2020-2158
Jenkins Literate Plugin 1.0 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in a remote code execution vulnerability...
Remote Code Execution vulnerability in Jenkins Literate Plugin
Jenkins Literate Plugin 1.0 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in a remote code execution vulnerability...
GHSA-C329-R874-XC7J Remote Code Execution vulnerability in Jenkins Literate Plugin
Jenkins Literate Plugin 1.0 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in a remote code execution vulnerability...
CloudBees Jenkins Literate Code Issue Vulnerability
CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing project and some timed tasks . Literate is used in one of the document build...
CVE-2020-2158
Jenkins Literate Plugin 1.0 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in a remote code execution vulnerability...
CVE-2020-2158
Jenkins Literate Plugin 1.0 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in a remote code execution vulnerability...
Remote code execution
Jenkins Literate Plugin 1.0 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in a remote code execution vulnerability...
CVE-2020-2158
The CVE-2020-2158 entry affects Jenkins Literate Plugin versions 1.0 and earlier. The root cause is that the YAML parser is not configured to prevent instantiation of arbitrary types, enabling remote code execution. The impact is remote code execution with the plugin, and multiple sources identif...
CVE-2020-2158
Jenkins Literate Plugin 1.0 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in a remote code execution vulnerability...
PT-2020-15376 · Jenkins · Jenkins Literate Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins Literate Plugin versions 1.0 and earlier Description: The issue results from the Jenkins Literate Plugin not configuring its YAML parser to prevent the instantiation of arbitrary types, leading to a remote code execution vulnerability...
RCE vulnerability in Literate
Literate 1.0 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types. This results in a remote code execution vulnerability exploitable by users able to provide YAML input files to Literate's build step. As of publication of this advisory, there is no fix...
CVE-2020-2158: Deserialization of Untrusted Data
Jenkins Literate Plugin 1.0 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in a remote code execution vulnerability...