Lucene search
+L

12 matches found

OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/11/13 3:23 a.m.•20 views

Malicious code in passport-nightwatch-sedna-karma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 590d2c8ef0713d21221fbae7ee5e08dbd5bc8bb6d9956061ea4aba71ab61dc4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

6.9AI score
SaveExploits0
EUVD
EUVD
•added 2025/11/12 4:29 a.m.•18 views

EUVD-2025-122634

Malicious code in request-callisto-apex-passport npm...

6.6AI score
SaveExploits0
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•18 views

EUVD-2022-6420

Malicious code in bioql PyPI...

5.8CVSS5.9AI score0.0109EPSS
SaveExploits0References6
osv_mal
osv_mal
•added 2025/08/14 6:52 p.m.•12 views

MAL-2025-37952 Malicious code in ursa-global-passport-markdown-pdf (npm)

The package ursa-global-passport-markdown-pdf was found to contain malicious code...

7.2AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/08/14 6:52 p.m.•15 views

Malicious code in kastra-tachyon-andromeda-passport (npm)

The package kastra-tachyon-andromeda-passport was found to contain malicious code...

7AI score
SaveExploits0
NVD
NVD
•added 2022/07/01 8:15 p.m.•23 views

CVE-2022-25896

This affects the package passport before 0.6.0. When a user logs in or logs out, the session is regenerated instead of being closed...

5.8CVSS0.0109EPSS
SaveExploits0References3
Prion
Prion
•added 2022/07/01 8:15 p.m.•25 views

Code injection

This affects the package passport before 0.6.0. When a user logs in or logs out, the session is regenerated instead of being closed...

5.8CVSS5.2AI score0.0109EPSS
SaveExploits0References3Affected Software1
osv_ubuntu
osv_ubuntu
•added 2022/07/01 8:15 p.m.•29 views

UBUNTU-CVE-2022-25896

This affects the package passport before 0.6.0. When a user logs in or logs out, the session is regenerated instead of being closed...

4.8CVSS6.6AI score0.0109EPSS
SaveExploits0References5
osv_cve
osv_cve
•added 2022/07/01 8:06 p.m.•37 views

CVE-2022-25896 Session Fixation

This affects the package passport before 0.6.0. When a user logs in or logs out, the session is regenerated instead of being closed...

4.8CVSS6.3AI score
SaveExploits0References5
Cvelist
Cvelist
•added 2022/07/01 8:06 p.m.•40 views

CVE-2022-25896 Session Fixation

This affects the package passport before 0.6.0. When a user logs in or logs out, the session is regenerated instead of being closed...

4.8CVSS5.3AI score0.0109EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2022/07/01 12:00 a.m.•10 views

PT-2022-17592

Name of the Vulnerable Software and Affected Versions passport versions prior to 0.6.0 Description The issue affects the passport package, causing the session to be regenerated instead of being closed when a user logs in or logs out. Recommendations For versions prior to 0.6.0, update to version...

5.8CVSS6.3AI score0.0109EPSS
SaveExploits0References15
Snyk
Snyk
•added 2022/05/20 9:09 a.m.•13 views

Session Fixation

Overview passport is a Simple, unobtrusive authentication for Node.js. Affected versions of this package are vulnerable to Session Fixation. When a user logs in or logs out, the session is regenerated instead of being closed. Remediation Upgrade passport to version 0.6.0 or higher. References -...

5.8CVSS7.9AI score0.0109EPSS
SaveExploits0References2
Rows per page
Query Builder