gradient-untangler

gradient-untangler A local research harness that searches for the exact tokens that make an open-weight language model start its answer the way you specify. Open-weight models ship as ordinary files: config.json, a tokenizer, and one or more .safetensors or .bin shards. A Hugging Face id is only ...

Prototype Pollution

@hapi/pez is vulnerable to Prototype Pollution. The vulnerability is due to improper handling of multipart payloads, allowing an attacker to craft a part whose content becomes the payload object's prototype, which enables bypassing validation rules or causing exceptions when accessing the request...

Malicious code in @zalastax/nolb-pez (npm)

The package @zalastax/nolb-pez was found to contain malicious code...

MAL-2025-13130 Malicious code in @zalastax/nolb-pez (npm)

The package @zalastax/nolb-pez was found to contain malicious code...

MAL-2025-10315 Malicious code in @zalastax/nolb-_pez (npm)

The package @zalastax/nolb-pez was found to contain malicious code...

Malicious code in @zalastax/nolb-_pez (npm)

The package @zalastax/nolb-pez was found to contain malicious code...

pezdispenserpriceguide.com Cross Site Scripting vulnerability OBB-2819125

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

3nit-components (>=0.0.2, <=0.0.4), 3nit-utils (>=0.3.0, <=0.23.0) +1591 more potentially affected by unknown CVE via pez (>=1.0.0, <=4.0.5)

pez NPM version =1.0.0, =0.0.2, =0.3.0, =1.0.0, =1.16.0, =1.16.0, =1.16.0, =1.0.0, =0.0.1, =0.1.0, =0.9.0, =1.0.7, =0.0.1, =1.0.8-rc.1, =11.1.27-alpha.4606607431 and more Source cves: unknown CVE Source advisory: OSV:GHSA-G64Q-3VG8-8F93...