MAL-2025-12534 Malicious code in @zalastax/nolb-ngx-f (npm)

The package @zalastax/nolb-ngx-f was found to contain malicious code...

MAL-2025-12531 Malicious code in @zalastax/nolb-ngx-c (npm)

The package @zalastax/nolb-ngx-c was found to contain malicious code...

Malicious Package

Overview ngx-satoris is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorshi...

MAL-2025-5992 Malicious code in ngx-satoris (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 673e3bc6e9e3b3d52385697990c722fc2d418dcb3169950ac1063ae5b0371c1f Any computer that has this package installed or running should be considered...

Malicious code in ngx-satoris (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 673e3bc6e9e3b3d52385697990c722fc2d418dcb3169950ac1063ae5b0371c1f Any computer that has this package installed or running should be considered...

CVE-2024-35184

Paperless-ngx is a document management system that transforms physical documents into a searchable online archive. Starting in version 2.5.0 and prior to version 2.8.6, remote user authentication allows API access even if API access is explicitly disabled. Version 2.8.6 contains a patchc for the...

PT-2024-5858

Name of the Vulnerable Software and Affected Versions NGINX Open Source and NGINX Plus versions prior to 1.26.2 NGINX Open Source and NGINX Plus versions prior to 1.27.1 Description The issue is related to a buffer overread vulnerability in the ngx http mp4 module, which might allow an attacker t...

MAL-2024-2503 Malicious code in ie3-ihm-lib-ngx (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in ie3-ihm-lib-ngx (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2757 Malicious code in ngx-iceberg-links (npm)

False positive caused by problematic ingestion. --- -= Per source details. Do not edit below this line.=-...

MAL-2024-2756 Malicious code in ngx-iceberg (npm)

False positive caused by problematic ingestion. --- -= Per source details. Do not edit below this line.=-...

CVE-2024-35184

Paperless-ngx is a document management system that transforms physical documents into a searchable online archive. Starting in version 2.5.0 and prior to version 2.8.6, remote user authentication allows API access even if API access is explicitly disabled. Version 2.8.6 contains a patchc for the...

CVE-2024-35184 paperless-ngx's remote user auth via header works even when disabling it for API

Paperless-ngx is a document management system that transforms physical documents into a searchable online archive. Starting in version 2.5.0 and prior to version 2.8.6, remote user authentication allows API access even if API access is explicitly disabled. Version 2.8.6 contains a patchc for the...

CVE-2024-35184 paperless-ngx's remote user auth via header works even when disabling it for API

Paperless-ngx is a document management system that transforms physical documents into a searchable online archive. Starting in version 2.5.0 and prior to version 2.8.6, remote user authentication allows API access even if API access is explicitly disabled. Version 2.8.6 contains a patchc for the...

CVE-2024-35184 paperless-ngx's remote user auth via header works even when disabling it for API

Paperless-ngx is a document management system that transforms physical documents into a searchable online archive. Starting in version 2.5.0 and prior to version 2.8.6, remote user authentication allows API access even if API access is explicitly disabled. Version 2.8.6 contains a patchc for the...

CVE-2024-35184

CVE-2024-35184 affects Paperless-ngx before 2.8.6. Evidence from PT-2024-26365 and ongoing CVE records shows that versions 2.5.0 through 2.8.5 expose remote API access via authentication that can be used even when API access is disabled. The root cause per the advisory is improper enforcement of ...

Paperless-ngx 安全漏洞

Paperless-ngx is a document management system from paperless-ngx open source. A security vulnerability exists in Paperless-ngx versions 2.5.0 through 2.8.6, which stems from remote user authentication allowing API access even when API access is explicitly disabled...

PT-2024-26365 · Unknown · Paperless-Ngx

Name of the Vulnerable Software and Affected Versions: Paperless-ngx versions 2.5.0 through 2.8.5 Description: The issue concerns remote user authentication in a document management system, allowing API access even when API access is explicitly disabled. Recommendations: For versions 2.5.0 throug...

@net7/boilerplate-arianna (>=5.6.0, <=5.6.11), myrta-ui (>=17.0.56, <=17.0.57) +1 more potentially affected by CVE-2024-4367 via ngx-extended-pdf-viewer (>=19.2.0, <=19.7.1)

ngx-extended-pdf-viewer NPM version =19.2.0, =5.6.0, =17.0.56, =18.0.0-next.0, =18.0.0-next.3 Source cves: CVE-2024-4367 Source advisory: SNYK:JS-NGXEXTENDEDPDFVIEWER-11790310...

PT-2024-40846 · Git +1 · Ghostscript

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a stack-buffer-overflow crash. Technical details include a crash type of Stack-buffer-overflow WRITE 4, with the crash state...