81 matches found
OESA-2026-4090 poco security update
This is ROS melodic roscomm's 3rdparty poco. Security Fixes: A vulnerability was found in poco up to 1.14.1. It has been rated as problematic. Affected by this issue is the function MultipartInputStream of the file Net/src/MultipartReader.cpp. The manipulation leads to null pointer dereference. T...
OESA-2026-3965 poco security update
This is ROS melodic roscomm's 3rdparty poco. Security Fixes: UTF32Encoding.cpp in POCO has a Poco::UTF32Encoding integer overflow and resultant stack buffer overflow because Poco::UTF32Encoding::convert and Poco::UTF32::queryConvert may return a negative integer if a UTF-32 byte sequence evaluate...
OESA-2026-3963 poco security update
This is ROS melodic roscomm's 3rdparty poco. Security Fixes: UTF32Encoding.cpp in POCO has a Poco::UTF32Encoding integer overflow and resultant stack buffer overflow because Poco::UTF32Encoding::convert and Poco::UTF32::queryConvert may return a negative integer if a UTF-32 byte sequence evaluate...
EUVD-2025-103770
Malicious code in melodicherringz3n npm...
EUVD-2025-103769
Malicious code in melodicspoonbillz3n npm...
Malicious code in melodic_penguin_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06ab45acfd772bcc9a95d24dbb983d89d83d39ebfa11b2acceb7991829dde3a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-90080
Malicious code in melodicwarblerz3n npm...
Malicious code in melodic_stingray_coral-37 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2de13888f23904dada75f268af0c06c52b3c7a7feb78c0aebd3b31e32d454373 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-74463
Malicious code in melodicstingraycoral-37 npm...
EUVD-2025-74464
Malicious code in melodicbarracudaplum-28 npm...
EUVD-2025-76302
Malicious code in melodichummingbird-tool npm...
EUVD-2025-76303
Malicious code in melodicgalliform-teagooddev npm...
EUVD-2025-76304
Malicious code in melodicbutterfly-smiletea npm...
EUVD-2025-76301
Malicious code in melodicyak-smiletea npm...
Malicious code in melodic_butterfly-smiletea (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03fda375cd92b1368f8c2f4d93fbb1bc28601ff935846e659391b9f7fbe82d0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in melodic_hummingbird-tool (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d92ea4cedf0df1638947550f4ea07d803b042ee9734223fb9cdb719248172cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in melodic_cuckoo_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a483140b0802a684d98a603f618ded04b9af919d3787bc06a7b0f8d4e410b956 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-78810
Malicious code in melodiccuckooz3n npm...