MAL-2025-31105 Malicious code in quarry-nectarine-c1k8 (npm)

The package quarry-nectarine-c1k8 was found to contain malicious code...

MAL-2025-31109 Malicious code in quarry_cy5kj_cipog_zenith (npm)

The package quarrycy5kjcipogzenith was found to contain malicious code...

MAL-2025-31108 Malicious code in quarry_cfi5s_dz7a4_phoenix (npm)

The package quarrycfi5sdz7a4phoenix was found to contain malicious code...

MAL-2025-31115 Malicious code in quarry_vw7lc_0mfi7_yarrow (npm)

The package quarryvw7lc0mfi7yarrow was found to contain malicious code...

CVE-2020-36324

Wikimedia Quarry analytics-quarry-web before 2020-12-15 allows Reflected XSS because app.py does not explicitly set the application/json content type...

MAL-2023-1277 Malicious code in quarry-connected (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9c875d815dcc55750fdec27a84807be3eca1bca0372ca5631501bcc7010b9365 The OpenSSF Package Analysis project identified 'quarry-connected' @ 1.1.1 npm as malicious. It is considered malicious because: - The package...

Malicious code in quarry-connected (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9c875d815dcc55750fdec27a84807be3eca1bca0372ca5631501bcc7010b9365 The OpenSSF Package Analysis project identified 'quarry-connected' @ 1.1.1 npm as malicious. It is considered malicious because: - The package...

Wikimedia Quarry analytics-quarry-web cross-site scripting vulnerability

Wikimedia Quarry analytics-quarry-web is an open source application. Wikimedia Quarry analytics-quarry-web is vulnerable to a cross-site scripting vulnerability. The vulnerability stems from the fact that app.py does not explicitly set the application json content type. No details of the...

CVE-2020-36324

Wikimedia Quarry analytics-quarry-web before 2020-12-15 allows Reflected XSS because app.py does not explicitly set the application/json content type...

CVE-2020-36324

Wikimedia Quarry analytics-quarry-web before 2020-12-15 allows Reflected XSS because app.py does not explicitly set the application/json content type...

Cross site scripting

Wikimedia Quarry analytics-quarry-web before 2020-12-15 allows Reflected XSS because app.py does not explicitly set the application/json content type...

CVE-2020-36324

Wikimedia Quarry analytics-quarry-web (affected component: app.py) is vulnerable to Reflected XSS due to not explicitly setting the application/json content type. This CVE (CVE-2020-36324) is described across multiple sources as enabling reflected XSS before 2020-12-15. The core detail shown in t...

CVE-2020-36324

Wikimedia Quarry analytics-quarry-web before 2020-12-15 allows Reflected XSS because app.py does not explicitly set the application/json content type...

Bryan Davis analytics-quarry-web 跨站脚本漏洞

Wikimedia Quarry analytics-quarry-web is an open source application. Wikimedia Quarry analytics-quarry-web is vulnerable to a cross-site scripting vulnerability. The vulnerability stems from the fact that app.py does not explicitly set the application json content type. No details of the...