18 matches found
PT-2025-62935
Impact Users importing contacts from untrusted sources. Specifically crafted contact data can lead to some of DOM modifications for the link button next to the field e.g. the link address can be overriden. CSS can be manipulated to give the button arbitrary look and change it's size so that any...
EUVD-2025-29413
Malicious code in bioql PyPI...
GHSA-QV97-5QR8-2266 Mithril snapshots for Cardano database could be compromised by an adversary
Impact Mithril certification of Cardano database The Mithril network provides certification for snapshots of the Cardano database, enabling users to quickly bootstrap a Cardano node without relying on the slower peer-to-peer synchronization process. To generate a multi-signature, a minimum...
Mithril snapshots for Cardano database could be compromised by an adversary
Impact Mithril certification of Cardano database The Mithril network provides certification for snapshots of the Cardano database, enabling users to quickly bootstrap a Cardano node without relying on the slower peer-to-peer synchronization process. To generate a multi-signature, a minimum...
PT-2025-20320 · Crates.Io · Mithril-Client
Impact Mithril certification of Cardano database The Mithril network provides certification for snapshots of the Cardano database, enabling users to quickly bootstrap a Cardano node without relying on the slower peer-to-peer synchronization process. To generate a multi-signature, a minimum...
Malicious code in oj-mithril-packages (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e5fee5d58e7e1464614f1aa017521ae6613da70897bbbc6ee11360593f419eca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in oj-mithril-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aa5fab859196881e392265ee85901316c60eebc3d334f9b4eae7c4bb039723f0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-651 Malicious code in oj-mithril-packages (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e5fee5d58e7e1464614f1aa017521ae6613da70897bbbc6ee11360593f419eca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-652 Malicious code in oj-mithril-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aa5fab859196881e392265ee85901316c60eebc3d334f9b4eae7c4bb039723f0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
GHSA-H3GG-7WX2-CQ3H XSS in Flarum Sticky extension
Impact A change in release beta 14 of the Sticky extension caused the plain text content of the first post of a pinned discussion to be injected as HTML on the discussion list. The issue was discovered following an internal audit. Any HTML would be injected through Mithril's m.trust helper. This...
XSS in Flarum Sticky extension
Impact A change in release beta 14 of the Sticky extension caused the plain text content of the first post of a pinned discussion to be injected as HTML on the discussion list. The issue was discovered following an internal audit. Any HTML would be injected through Mithril's m.trust helper. This...
@mlshv/modern-koa-docs (3.0.2), bootstrap-mithril (>=1.0.4-alpha.0, <=1.0.5-alpha.0) +26 more potentially affected by unknown CVE via mithril (>=1.0.0, <=1.1.6)
mithril NPM version =1.0.0, =1.0.4-alpha.0, =1.0.4-alpha.0, =1.0.4-alpha.0, =1.0.4-alpha.0, =1.0.4-alpha.1, =1.0.4-alpha.0, =0.6.0, =1.0.0-alpha.2, =1.0.0-alpha.2, =0.2.0, =0.1.0, =1.0.1-5, =0.3.0, =0.3.6 and more Source cves: unknown CVE Source advisory: OSV:GHSA-C3PX-V9C7-M734...
mirtx (0.1.0), mithril-slider (1.1.2) potentially affected by unknown CVE via mithril (2.0.0-rc.4)
mithril NPM version 2.0.0-rc.4 is affected by a known vulnerability. The following packages have a transitive dependency on mithril and may be impacted: - mirtx 0.1.0 - mithril-slider 1.1.2 Source cves: unknown CVE Source advisory: OSV:GHSA-C3PX-V9C7-M734...
GHSA-C3PX-V9C7-M734 Prototype Pollution in mithril
Affected versions of mithrilare vulnerable to prototype pollution. The function parseQueryString may allow a malicious user to modify the prototype of Object, causing the addition or modification of an existing property that will exist on all objects. A payload such as proto%5BtoString%5D=123 in...
Prototype Pollution in mithril
Affected versions of mithrilare vulnerable to prototype pollution. The function parseQueryString may allow a malicious user to modify the prototype of Object, causing the addition or modification of an existing property that will exist on all objects. A payload such as proto%5BtoString%5D=123 in...
PT-2020-21222
Name of the Vulnerable Software and Affected Versions mithril versions prior to 1.1.7 mithril versions prior to 2.0.2 Description The issue allows a malicious user to modify the prototype of Object, causing the addition or modification of an existing property that will exist on all objects. This...
Prototype Pollution
Overview org.webjars:mithril is a modern client-side JavaScript framework for building Single Page Applications and provides routing and XHR utilities out of the box. Affected versions of this package are vulnerable to Prototype Pollution. parseQueryString may allow a malicious user to modify the...
Prototype Pollution
Overview Affected versions of mithrilare vulnerable to prototype pollution. The function parseQueryString may allow a malicious user to modify the prototype of Object, causing the addition or modification of an existing property that will exist on all objects. A payload such as...