9 matches found
Duplicate Advisory: Command Injection in jsii-diff via npm: package argument
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-wcx4-wpfv-mc5c. This link is maintained to preserve external references. Original Description OS command injection in the npm package loading component in AWS jsii-diff before 1.131.0 might allow context-depende...
CVE-2026-15895
OS command injection in the npm package loading component in AWS jsii-diff before 1.131.0 might allow context-dependent attackers to execute arbitrary commands via crafted package specifiers passed to the npm: source argument. To mitigate this issue, users should upgrade to jsii-diff v1.131.0 or...
CVE-2026-15895: Improper Neutralization of Special Elements used in an OS Command
OS command injection in the npm package loading component in AWS jsii-diff before 1.131.0 might allow context-dependent attackers to execute arbitrary commands via crafted package specifiers passed to the npm: source argument. To mitigate this issue, users should upgrade to jsii-diff v1.131.0 or...
nodejs:22 security update
nodejs 1:22.22.0-1 - Update to 22.22.0 Resolves: RHEL-141879 nodejs-nodemon 3.0.1-1 - Rebase to 3.0.1 - Resolves: CVE-2022-25883 2.0.20-2 - Patch bundled glob-parent - Resolves: CVE-2021-35065 2.0.20-1 - Rebase to 2.0.20 Resolves: CVE-2022-3517 2.0.15-1 - Resolves: RHBZ2005419 - Resolves...
MAL-2025-2850 Malicious code in bitrue-test (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-1851 Malicious code in instacart-admin (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-868 Malicious code in signup-ui-url-generator (npm)
--- -= Per source details. Do not edit below this line.=-...