501 matches found
Security Bulletin: IBM watsonx Orchestrate Cartridge affected by vulnerability in setuptools-70.3.0-py3-none-any.whl
Summary IBM watsonx Orchestrate Cartridge contains a vulnerable version of setuptools-70.3.0-py3-none-any.whl Vulnerability Details CVEID:CVE-2025-47273 DESCRIPTION: setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. A path traversal...
Security Bulletin: IBM watsonx Orchestrate Cartridge affected by vulnerability in http-proxy-middleware-2.0.7.tgz
Summary IBM watsonx Orchestrate Cartridge contains a vulnerable version of http-proxy-middleware-2.0.7.tgz Vulnerability Details CVEID:CVE-2025-32997 DESCRIPTION: In http-proxy-middleware before 2.0.9 and 3.x before 3.0.5, fixRequestBody proceeds even if bodyParser has failed. CWE:CWE-754: Improp...
Security Bulletin: IBM watsonx Orchestrate Cartridge affected by vulnerability in helpers-7.24.0.tgz
Summary IBM watsonx Orchestrate Cartridge contains a vulnerable version of helpers-7.24.0.tgz Vulnerability Details CVEID:CVE-2025-27789 DESCRIPTION: Babel is a compiler for writing next generation JavaScript. When using versions of Babel prior to 7.26.10 and 8.0.0-alpha.17 to compile regular...
Security Bulletin: IBM watsonx Orchestrate Cartridge affected by vulnerability in cryptography-44.0.0-cp37-abi3-macosx_10_9_universal2.whl
Summary IBM watsonx Orchestrate Cartridge contains a vulnerable version of cryptography-44.0.0-cp37-abi3-macosx109universal2.whl Vulnerability Details CVEID:CVE-2024-12797 DESCRIPTION: Issue summary: Clients using RFC7250 Raw Public Keys RPKs to authenticate a server may fail to notice that the...
Security Bulletin: IBM watsonx Orchestrate Cartridge affected by vulnerability in axios-1.6.1.tgz
Summary IBM watsonx Orchestrate Cartridge contains a vulnerable version of axios-1.6.1.tgz Vulnerability Details CVEID:CVE-2025-27152 DESCRIPTION: axios is a promise based HTTP client for the browser and node.js. The issue occurs when passing absolute URLs rather than protocol-relative URLs to...
Security Bulletin: Vulnerabilities in Apache Kafka affects IBM watsonx Orchestrate with watsonx Assistant Cartridge
Summary Potential vulnerabilities in Apache Kafka have been identified that affects IBM watsonx Orchestrate with watsonx Assistant Cartridge - UAB Component. The vulnerabilities have been addressed. Refer to details for additional information. Vulnerability Details CVEID:CVE-2025-27818 DESCRIPTIO...
Malicious code in hot-decrypt-private-orchestrate-tau (npm)
The package hot-decrypt-private-orchestrate-tau was found to contain malicious code...
Malicious code in container-await-emulate-double-orchestrate (npm)
The package container-await-emulate-double-orchestrate was found to contain malicious code...
Malicious code in sandbox-report-cat-orchestrate-orchestrate (npm)
The package sandbox-report-cat-orchestrate-orchestrate was found to contain malicious code...
Malicious code in kernel-abstract-compile-proxy-orchestrate (npm)
The package kernel-abstract-compile-proxy-orchestrate was found to contain malicious code...
Malicious code in meta-bad-protected-orchestrate-serialize (npm)
The package meta-bad-protected-orchestrate-serialize was found to contain malicious code...
Malicious code in earth-wind-fork-orchestrate-notify (npm)
The package earth-wind-fork-orchestrate-notify was found to contain malicious code...
MAL-2025-22665 Malicious code in hot-decrypt-private-orchestrate-tau (npm)
The package hot-decrypt-private-orchestrate-tau was found to contain malicious code...
MAL-2025-24404 Malicious code in kernel-abstract-compile-proxy-orchestrate (npm)
The package kernel-abstract-compile-proxy-orchestrate was found to contain malicious code...
MAL-2025-33441 Malicious code in small-encrypt-orchestrate-star-grid (npm)
The package small-encrypt-orchestrate-star-grid was found to contain malicious code...
Malicious code in orchestrate-finally-static-long-cloud (npm)
The package orchestrate-finally-static-long-cloud was found to contain malicious code...
MAL-2025-29126 Malicious code in phi-orchestrate-cron-hash-function (npm)
The package phi-orchestrate-cron-hash-function was found to contain malicious code...
MAL-2025-23087 Malicious code in import-process-orchestrate-stub-phi (npm)
The package import-process-orchestrate-stub-phi was found to contain malicious code...