MAL-2026-1623 Malicious code in @f5rest/odata-v4-service-metadata (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3183cb83976cbb4d5011bae853bc65c285e5204ca17b1435d5ce6801dcfd9e2a The package @f5rest/odata-v4-service-metadata was found to contain malicious code...

Malicious code in @f5rest/odata-v4-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34696bd2c7207574311745e28bb00c41c683bef6c9843edc69042a47081df10b The package @f5rest/odata-v4-server was found to contain malicious code...

MAL-2026-1622 Malicious code in @f5rest/odata-v4-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34696bd2c7207574311745e28bb00c41c683bef6c9843edc69042a47081df10b The package @f5rest/odata-v4-server was found to contain malicious code...

Malicious code in @f5rest/odata-v4-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6c0d3534cf1970619de7e95adb567342da4b367ca00683ce7e8a0e723bb6d57 The package @f5rest/odata-v4-parser was found to contain malicious code...

MAL-2026-1621 Malicious code in @f5rest/odata-v4-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6c0d3534cf1970619de7e95adb567342da4b367ca00683ce7e8a0e723bb6d57 The package @f5rest/odata-v4-parser was found to contain malicious code...

MAL-2026-1619 Malicious code in @f5rest/odata-v4-inmemory (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9179dd00def504544f38e24e0c660bae5223aa9ad2681cc61ab72057e3ee14b The package @f5rest/odata-v4-inmemory was found to contain malicious code...

com.github.promregator:promregator (>=0.6.3, <=0.9.0), com.lancethomps:lava (>=1.0.0, <=1.12.0) +160 more potentially affected by CVE-2021-23900 via com.mikesamuel:json-sanitizer (>=1.2.0, <=1.2.1)

com.mikesamuel:json-sanitizer MAVEN version =1.2.0, =0.6.3, =1.0.0, =1.0.0, =1.1.0, =1.1.0, =1.8.1, =1.0.0, =1.0.0, =1.0.0, =1.1.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.2.0 and more Source cves: CVE-2021-23900 Source advisory: GHSA-8RF5-92JH-3VC9...

CVE-2019-0338

During an OData V2/V4 request in SAP Gateway, versions 750, 751, 752, 753, the HTTP Header attributes cache-control and pragma were not properly set, allowing an attacker to access restricted information, resulting in Information Disclosure...