Malicious code in @fdr-mar/promos-types (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0ff10da2d93550bf81006c507400661d5d6d163e7ed31fd2dabc6c3d9be805e The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-15648 Malicious code in @fdr-mar/promos-types (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0ff10da2d93550bf81006c507400661d5d6d163e7ed31fd2dabc6c3d9be805e The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

CVE-2026-43927

FOSSBilling has a race-condition vulnerability in the cart checkout flow that, before version 0.8.0, lets an authenticated user apply promo codes beyond their maxuses by sending concurrent checkout requests before usage increments complete. This can enable unlimited discounts or free orders from ...

promos-algerie.com Cross Site Scripting vulnerability OBB-1443454

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Zomato: [www.zomato.com] IDOR - Delete/Deactivate ANY/ALL Promos through a Post Request at **clients/promoDataHandler.php**

@prateek0490 found a IDOR issue which can deactivate any special offer in our platform...