242 matches found
@8medusa/medusa-oas-cli (>=2.7.0, <=2.12.8), @akbarsafari00/bonyan (>=5.52.1-fa.2, <=5.52.1-fa.6) +109 more potentially affected by CVE-2026-85024 via undici (>=6.25.0, <=6.28.0)
undici NPM version =6.25.0, =2.7.0, =5.52.1-fa.2, =5.52.1-fa.5, =0.1.0-rc.27, =0.1.0-rc.27, =0.0.29, =1.0.7, =2.4.0, =5.3.0-beta.0, =0.1.55-beta.2, =1.3.0, =1.3.0, =1.3.0, =1.0.0, =1.0.5 and more Source cves: CVE-2026-85024 Source advisory: OSV:GHSA-3WWX-PV8P-Q78V...
CVE-2026-5650
A vulnerability was found in code-projects Online Application System for Admission 1.0. Impacted is an unknown function of the file /enrollment/database/oas.sql. Performing a manipulation results in insecure storage of sensitive information. The attack is possible to be carried out remotely. The...
CVE-2026-5650
The CVE-2026-5650 entry concerns code-projects Online Application System for Admission 1.0. A vulnerability affects an unknown function within the file /enrollment/database/oas.sql, enabling manipulation that leads to insecure storage of sensitive information. The attack is described as remotely ...
CVE-2026-5650 code-projects Online Application System for Admission oas.sql sensitive information
A vulnerability was found in code-projects Online Application System for Admission 1.0. Impacted is an unknown function of the file /enrollment/database/oas.sql. Performing a manipulation results in insecure storage of sensitive information. The attack is possible to be carried out remotely. The...
CVE-2023-31242
An authentication bypass vulnerability exists in the OAS Engine functionality of Open Automation Software OAS Platform v18.00.0072. A specially-crafted series of network requests can lead to arbitrary authentication. An attacker can send a sequence of requests to trigger this vulnerability...
CVE-2022-26026
A denial of service vulnerability exists in the OAS Engine SecureConfigValues functionality of Open Automation Software OAS Platform V16.00.0112. A specially-crafted network request can lead to loss of communications. An attacker can send a network request to trigger this vulnerability...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. The package was flagged as malicious during the Sha1-hulud supply chain attack. Although the Sha1-hulud IoCs are not present within the package, the contents of the affected version were removed from the officia...
MAL-2025-191458 Malicious code in @medusajs/medusa-oas-cli (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48124e119c7f2c21e744172a5901266335824c5ceac7a1c631805772baa3798a The package @medusajs/medusa-oas-cli was found to contain malicious code. Source: ghsa-malware...
EUVD-2024-22339
Malicious code in bioql PyPI...
EUVD-2024-19774
Malicious code in bioql PyPI...
EUVD-2024-19481
Malicious code in bioql PyPI...
EUVD-2023-39032
Malicious code in bioql PyPI...
EUVD-2023-38433
Malicious code in bioql PyPI...
EUVD-2023-38398
Malicious code in bioql PyPI...
EUVD-2023-36525
Malicious code in bioql PyPI...
EUVD-2022-30635
Malicious code in bioql PyPI...
EUVD-2022-30595
Malicious code in bioql PyPI...
EUVD-2022-30864
Malicious code in bioql PyPI...