Lucene search
+L

844 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/08 8:33 a.m.3 views

Malicious code in d2l-rubric-polymer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ffe4a4a3c695e3f39e87fbc9f464c883e8275ec033acd22a40cc3190a97d201a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
added 2022/06/08 8:33 a.m.12 views

MAL-2022-2308 Malicious code in d2l-rubric-polymer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ffe4a4a3c695e3f39e87fbc9f464c883e8275ec033acd22a40cc3190a97d201a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSV
OSV
added 2019/12/02 6:4 p.m.12 views

GHSA-5PM8-492C-92P5 Prototype Pollution in chartkick

Affected versions of @polymer/polymer are vulnerable to prototype pollution. The package fails to prevent modification of object prototypes through chart options containing a payload such as "proto": "polluted": true. It is possible to achieve the same results if a chart loads data from a malicio...

7.3CVSS7AI score0.01391EPSS
SaveExploits0References8
Github Security Blog
Github Security Blog
added 2019/12/02 6:4 p.m.66 views

Prototype Pollution in chartkick

Affected versions of @polymer/polymer are vulnerable to prototype pollution. The package fails to prevent modification of object prototypes through chart options containing a payload such as "proto": "polluted": true. It is possible to achieve the same results if a chart loads data from a malicio...

7.5CVSS4.3AI score0.01391EPSS
SaveExploits0References9Affected Software1
Rows per page
Query Builder