1080 matches found
EUVD-2025-52855
Malicious code in overall-emerald-mouse npm...
EUVD-2025-52859
Malicious code in overall-beige-sole npm...
Malicious code in overall-teal-eel (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed22e164e9c20139d8e782919f599f27f26200d8cf023d87d2500dd41d85c0d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in overall-beige-sole (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac239d2e3e63479217ddfbf43f4552ee2db2f428e7e7805053325df7d892a252 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-52856
Malicious code in overall-cyan-fox npm...
EUVD-2025-52857
Malicious code in overall-coral-toucan npm...
EUVD-2025-52858
Malicious code in overall-coffee-cougar npm...
EUVD-2025-45876
Malicious code in overallmarlinz3n npm...
EUVD-2025-45875
Malicious code in overallparrotz3n npm...
CVE-2025-64137
A missing permission check in Jenkins Themis Plugin 1.4.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified HTTP server...
CVE-2025-64148
A missing permission check in Jenkins Publish to Bitbucket Plugin 0.4 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins...
GHSA-JWM4-955W-4HJ3 Jenkins Themis Plugin is missing a permission check
Jenkins Themis Plugin 1.4.1 and earlier does not perform a permission check in an HTTP endpoint. This allows attackers with Overall/Read permission to connect to an attacker-specified URL. Additionally, this endpoint does not require POST requests, resulting in a cross-site request forgery CSRF...
Cross-site Request Forgery (CSRF)
Overview org.jenkins-ci.plugins:themis is an A Jenkins plugin to communicate with a Themis instance. It can send report files to be analyzed by Themis and send a refresh request for a project. Affected versions of this package are vulnerable to Cross-site Request Forgery CSRF due to a lack of...
Missing Authorization
Overview org.jenkins-ci.plugins:nexus-task-runner is a This plugin executes Sonatype Nexus scheduled tasks after your build. For example, if you want to refresh your Nexus's repositories index after building your project, you can use execute a Nexus task whose type is "Publish index" using this...
GHSA-6MGR-3374-4P3C Jenkins Start Windocks Containers Plugin vulnerable to cross-site request forgery
Jenkins Start Windocks Containers Plugin 1.4 and earlier does not perform a permission check in an HTTP endpoint. This allows attackers with Overall/Read permission to connect to an attacker-specified URL. Additionally, this endpoint does not require POST requests, resulting in a cross-site reque...
EUVD-2025-36659
Jenkins Start Windocks Containers Plugin is missing a permission check...
EUVD-2025-36662
Jenkins Themis Plugin is missing a permission check...
Jenkins Themis Plugin vulnerable to cross-site request forgery
Jenkins Themis Plugin 1.4.1 and earlier does not perform a permission check in an HTTP endpoint. This allows attackers with Overall/Read permission to connect to an attacker-specified URL. Additionally, this endpoint does not require POST requests, resulting in a cross-site request forgery CSRF...
GHSA-MJ6V-4WR4-GJ57 Jenkins Start Windocks Containers Plugin is missing a permission check
Jenkins Start Windocks Containers Plugin 1.4 and earlier does not perform a permission check in an HTTP endpoint. This allows attackers with Overall/Read permission to connect to an attacker-specified URL. Additionally, this endpoint does not require POST requests, resulting in a cross-site reque...