MAL-2026-4448 Malicious code in @tailwind-core/oxide-linux-x64-gnu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a107a0746f2f5159d661e4d332eac53f871b9d22f80caf5863bdd713e252ae00 The package name '@tailwind-core/oxide-linux-x64-gnu' impersonates the legitimate Tailwind CSS v4 oxide engine package...

SQL Injection

Overview Affected versions of this package are vulnerable to SQL Injection via the sorting parameter. An attacker can execute arbitrary code and insert malicious database content by manipulating crafted URLs. Remediation Upgrade oxid-esales/oxideshop-ce to version 6.3.4 or higher. References -...

oxide-sql

No d...

CVE-2023-50913

Oxide control plane software before 5 allows SSRF...

CVE-2025-66432

In Oxide control plane 15 through 17 before 17.1, API tokens can be renewed past their expiration date...

EUVD-2025-199923

In Oxide control plane 15 through 17 before 17.1, API tokens can be renewed past their expiration date...

CVE-2025-66432

In Oxide control plane 15 through 17 before 17.1, API tokens can be renewed past their expiration date...

CVE-2025-66432

In Oxide control plane 15 through 17 before 17.1, API tokens can be renewed past their expiration date...

CVE-2025-66432

In Oxide control plane 15 through 17 before 17.1, API tokens can be renewed past their expiration date...

CVE-2025-66432

In Oxide Control Plane versions 15–17 before 17.1, API tokens can be renewed past their expiration date. This is the core issue; no exploitation details are provided in the documents. The remediation/patch version is not explicitly stated in the supplied materials.

CVE-2025-66432

In Oxide control plane 15 through 17 before 17.1, API tokens can be renewed past their expiration date...

Oxide Control Plane 安全漏洞

Oxide Control Plane is an open source console software from Oxide Computer Company. A security vulnerability exists in Oxide Control Plane versions 15 through 17 and prior to 17.1, which stems from the possibility that API tokens may continue to be used after expiration...

PT-2025-48383

In Oxide control plane 15 through 17 before 17.1, API tokens can be renewed past their expiration date...

EUVD-2016-2673

Malware in sbrugna...

EUVD-2015-1462

Malware in sbrugna...

EUVD-2016-2681

Malware in sbrugna...

EUVD-2015-1469

Malware in sbrugna...

EUVD-2011-4630

Malware in sbrugna...

EUVD-2015-1472

Malware in sbrugna...

EUVD-2015-1458

Malware in sbrugna...