78 matches found
Always-Incorrect Control Flow Implementation
Overview Affected versions of this package are vulnerable to Always-Incorrect Control Flow Implementation due to an inverted time comparison in the OIDC JWKS and token cache processes. An attacker can cause expired tokens to be reused or force repeated network requests to the OIDC provider by...
CVE-2026-32735
openapi-to-java-records-mustache-templates allows users to generate Java Records from OpenAPI specifications. Starting in version 5.1.1 and prior to version 5.5.1, the parent POM file of this project openapi-to-java-records-mustache-templates-parent, which is used to centralize plugin...
CVE-2026-32735 Unpacking Arbitrary Mustache Template Files via `maven-dependency-plugin`
openapi-to-java-records-mustache-templates allows users to generate Java Records from OpenAPI specifications. Starting in version 5.1.1 and prior to version 5.5.1, the parent POM file of this project openapi-to-java-records-mustache-templates-parent, which is used to centralize plugin...
CVE-2026-32735
The CVE concerns the project openapi-to-java-records-mustache-templates and its parent POM. Between versions 5.1.1 and 5.5.1, the parent POM (used to centralize plugin configurations) uses maven-dependency-plugin to unpack arbitrary .mustache files from the same-version artifact. Although the par...
EUVD-2026-12979
openapi-to-java-records-mustache-templates allows users to generate Java Records from OpenAPI specifications. Starting in version 5.1.1 and prior to version 5.5.1, the parent POM file of this project openapi-to-java-records-mustache-templates-parent, which is used to centralize plugin...
CVE-2026-32735
openapi-to-java-records-mustache-templates allows users to generate Java Records from OpenAPI specifications. Starting in version 5.1.1 and prior to version 5.5.1, the parent POM file of this project openapi-to-java-records-mustache-templates-parent, which is used to centralize plugin...
CVE-2026-32735 Unpacking Arbitrary Mustache Template Files via `maven-dependency-plugin`
openapi-to-java-records-mustache-templates allows users to generate Java Records from OpenAPI specifications. Starting in version 5.1.1 and prior to version 5.5.1, the parent POM file of this project openapi-to-java-records-mustache-templates-parent, which is used to centralize plugin...
PT-2026-26163
openapi-to-java-records-mustache-templates allows users to generate Java Records from OpenAPI specifications. Starting in version 5.1.1 and prior to version 5.5.1, the parent POM file of this project openapi-to-java-records-mustache-templates-parent, which is used to centralize plugin...
Exploit for CVE-2025-66516
⚠️ READ DISCLAIMER BEFORE USE ⚠️ Educat...
EUVD-2025-135293
Malicious code in tray-pzp-pom npm...
Malicious code in tray-pzp-pom (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb3d753dfaab1f7cd55a51a5033f44d4199abc2c5be30266454b7849c230fcaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-135292
Malicious code in tray-pzp-pom npm...
CVE-2025-57140
rsbi-pom 4.7 is vulnerable to SQL Injection in the /bi/service/model/DatasetService path...
CVE-2025-57140
rsbi-pom 4.7 is vulnerable to SQL Injection in the /bi/service/model/DatasetService path...
CVE-2025-57140
rsbi-pom 4.7 is vulnerable to SQL Injection in the /bi/service/model/DatasetService path...
CVE-2025-57140
CVE-2025-57140 affects rsbi-pom 4.7 with a SQL Injection vulnerability in the API endpoint path /bi/service/model/DatasetService . The CVSS 3.1 vector indicates a CRITICAL severity (9.8) with a NETWORK attack vector, no user interaction, and no privileges required, resulting in high impact to con...
rsbi-pom 安全漏洞
rsbi-pom rsbi BI is a business intelligence system for the individual developers of rsbi BI. A security vulnerability exists in rsbi-pom version 4.7, which originates from the /bi/service/model/DatasetService path that is susceptible to SQL injection attacks...
CVE-2025-57140
rsbi-pom 4.7 is vulnerable to SQL Injection in the /bi/service/model/DatasetService path...
PT-2025-35561
Name of the Vulnerable Software and Affected Versions: rsbi-pom version 4.7 Description: rsbi-pom version 4.7 is vulnerable to SQL Injection via the /bi/service/model/DatasetService API endpoint. Recommendations: At the moment, there is no information about a newer version that contains a fix for...
CVE-2025-57140
rsbi-pom 4.7 is vulnerable to SQL Injection in the /bi/service/model/DatasetService path...