EUVD-2017-5955

Malware in sbrugna...

EUVD-2023-3110

Malicious code in bioql PyPI...

com.github.camel-labs:camel-pubnub (=0.1.0), io.relayr:android-sdk (>=0.0.1 <=0.0.7) +3 more potentially affected by CVE-2023-26154 via com.pubnub:pubnub (>=3.6.3 <=3.7.4)

com.pubnub:pubnub MAVEN version =3.6.3, =0.0.1, =0.1.1, =0.1.1, =0.1.1, =0.1.4 Source cves: CVE-2023-26154 Source advisory: OSV:GHSA-5844-Q3FC-56RH...

PubNub Security Breach

PubNub is a library of PubNub open source . It is used to take care of the infrastructure and APIs required to handle the real-time communication layer of an application. PubNub suffers from a security vulnerability that stems from an inefficient implementation of the AES-256-CBC encryption...

Insufficient Entropy

Overview pubnub is a Publish & Subscribe Real-time Messaging with PubNub Affected versions of this package are vulnerable to Insufficient Entropy via the getKey function, due to inefficient implementation of the AES-256-CBC cryptographic algorithm. The provided encrypt function is less secure whe...