@agoric/access-token (>=0.4.16-dev-23c942c.0, <=0.4.16-dev.0), @agoric/assert (>=0.1.0, <=0.3.15-dev.2) +100 more potentially affected by unknown CVE via ses (>=0.0.1, <=0.15.24)

ses NPM version =0.0.1, =0.4.16-dev-23c942c.0, =0.1.0, =1.2.0, =1.3.0, =0.1.0, =0.10.8-dev.0, =0.2.0, =1.5.1, =0.5.6-dev-f662032.0, =0.0.1, =0.1.1, =0.0.9, =0.1.1, =0.2.0, =0.5.30-dev-fe997f2.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-WHPX-Q3RQ-W8JC...

PYSEC-2022-43077

The d8s-ip-addresses package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-csv package. The affected version is 0.1.0...

PYSEC-2022-43111

The d8s-html for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-networking package. The affected version is 0.1.0...

PYSEC-2022-43074

The d8s-archives for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-strings package. The affected version is 0.1.0...

PYSEC-2022-43119

The d8s-archives for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-strings package. The affected version is 0.1.0...

PYSEC-2022-43101

The d8s-strings for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-hypothesis package. The affected version is 0.1.0...

CVE-2022-38885

The d8s-netstrings for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-strings package. The affected version is 0.1.0...

PT-2022-25373 · Pypi · Democritus-Networking +1

Name of the Vulnerable Software and Affected Versions: d8s-urls version 0.1.0 Description: A potential code-execution backdoor was inserted by a third party into the d8s-urls package for Python, distributed on PyPI. The democritus-networking package is also identified as a potential code executio...

MGASA-2022-0328 Updated zlib packages fix security vulnerability

zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call...

BELL-CVE-2021-3735

Bulletin has no description...

Ubuntu: Security Advisory (USN-3489-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-28424

This affects all versions of package s3-kilatstorage...

py-flask-security -- user redirect to arbitrary URL vulnerability

Snyk reports: This affects all versions of package Flask-Security. When using the getpostlogoutredirect and getpostloginredirect functions, it is possible to bypass URL validation and redirect a user to an arbitrary URL by providing multiple back slashes such as \\evil.com/path. This vulnerabilit...

CVE-2020-7677

This affects the package thenify before 3.3.1. The name argument provided to the package can be controlled by users without any sanitization, and this is provided to the eval function without any sanitization...

GHSA-CJ7V-27PG-WF7Q vulnerabilities

Vulnerabilities for packages: druid, spark...

MGASA-2022-0248 Updated ruby-git packages fix security vulnerability

Command Injection via git argument injection CVE-2022-25648...

MAL-2022-654 Malicious code in @tinkoff-react-bui/highlighter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0f35ba0953c3d1b55af3ac66481e856e15f84300b58641282f67339e9fa1bbb3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-275 Malicious code in @flameshot/fetlife-assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b8bbca4a9cd0a35a35928860188f38aa877f6edfa6b4eb2b65c110d2d83990bf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Security fix for the ALT Linux 10 package php8.2 version 8.1.7-alt1

June 16, 2022 Anton Farygin 8.1.7-alt1 - 8.1.6 - 8.1.7 Fixes: CVE-2022-31626, CVE-2022-31625...

MGASA-2022-0227 Updated docker-containerd packages fix security vulnerability

A bug was found in the containerd's CRI implementation where programs inside a container can cause the containerd daemon to consume memory without bound during invocation of the 'ExecSync' API. CVE-2022-31030...