629301 matches found
Malicious code in @umschool/analytics (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da14c2843514d3c9103335648bc81a8bce18fc173b27c2ab39ebe2c6c0abe028 @umschool/[email protected] targets the internal @umschool npm scope with an implausibly high version number to force resolution over any private...
NPM: xmldom: Processing Instruction Target Injection Bypasses requireWellFormed
NPM: xmldom: Processing Instruction Target Injection Bypasses requireWellFormed vulnerability discovered by ? in WordPress Npm xmldom versions = 0.6.0...
NPM: xmldom: DocType `name` Injection Bypasses requireWellFormed
NPM: xmldom: DocType name Injection Bypasses requireWellFormed vulnerability discovered by ? in WordPress Npm xmldom versions = 0.6.0...
08cms (1.0.0), 0uth (>=1.0.5, <=1.2.1) +12683 more potentially affected by CVE-2026-83608 +1 more via xmldom (>=0.1.2, <=0.6.0)
xmldom NPM version =0.1.2, =1.0.5, =1.0.0, =1.0.0, =1.7.3, =0.1.0, =0.0.2, =0.0.1, =1.0.2, =1.0.3, =1.0.23, =1.0.1, =1.3.1 and more Source cves: CVE-2026-83608, CVE-2026-83613 Source advisory: OSV:GHSA-27P8-2357-5QQV...
6thbridge-hexa-docs (0.0.1), @12-labours/mapintegratedvuer (>=1.0.0-beta.0, <=1.0.0-beta.14) +1066 more potentially affected by CVE-2026-83618 via @xmldom/xmldom (>=0.9.10, <=0.9.11)
@xmldom/xmldom NPM version =0.9.10, =1.0.0-beta.0, =0.0.1, =0.0.1, =0.0.1, =2.4.4, =0.1.30-develop-map-0, =0.1.0, =0.3.2-beta.0, =0.8.1, =0.1.0, =0.8.0, =0.6.0, =3.4.1 and more Source cves: CVE-2026-83618 Source advisory: GHSA-VR34-HP96-76PP...
NPM: xmldom: Parser silently accepts a not-well-formed end tag whose name is followed by a line break and trailing content
NPM: xmldom: Parser silently accepts a not-well-formed end tag whose name is followed by a line break and trailing content vulnerability discovered by ? in WordPress Npm xmldom versions = 0.6.0...
NPM: xmldom: Quadratic-time attribute deduplication
NPM: xmldom: Quadratic-time attribute deduplication vulnerability discovered by ? in WordPress Npm xmldom versions = 0.6.0...
NPM: xmldom: Quadratic-memory consumption
NPM: xmldom: Quadratic-memory consumption vulnerability discovered by ? in WordPress Npm xmldom versions = 0.1.5, = 0.6.0...
NPM: joi: Prototype pollution via a `__proto__` language key in custom messages
NPM: joi: Prototype pollution via a proto language key in custom messages vulnerability discovered by ? in WordPress Npm joi versions = 17.2.0, 17.13.6...
CVE-2026-53606 vulnerabilities
Vulnerabilities for packages: jupyter-base-notebook, tensorflow-gpu-jupyter...
GHSA-JXWJ-J7WR-GFRW vulnerabilities
Vulnerabilities for packages: jupyter-base-notebook, tensorflow-gpu-jupyter...
CVE-2026-71211 vulnerabilities
Vulnerabilities for packages: mlflow, mlflow-fips...
CVE-2021-42550 vulnerabilities
Vulnerabilities for packages: hadoop-fips...
CVE-2026-63075 vulnerabilities
Vulnerabilities for packages: eco-python-openssl...
GHSA-3J55-QF57-HQC2 vulnerabilities
Vulnerabilities for packages: eco-python-openssl...
GHSA-WP5F-6Q39-Q2F4 vulnerabilities
Vulnerabilities for packages: eco-python-openssl...
CVE-2026-54874 vulnerabilities
Vulnerabilities for packages: eco-python-openssl...
CVE-2026-63073 vulnerabilities
Vulnerabilities for packages: eco-python-openssl...
