PT-2023-22710 · Hermes · Hermes

Name of the Vulnerable Software and Affected Versions: Hermes versions prior to commit da8990f737ebb9d9810633502f65ed462b819c09 Description: A use-after-free related to unsound inference in the bytecode generation when optimizations are enabled could have been used by an attacker to achieve remot...

CVE-2023-26044

react/http is an event-driven, streaming HTTP client and server implementation for ReactPHP. Previous versions of ReactPHP's HTTP server component contain a potential DoS vulnerability that can cause high CPU load when processing large HTTP request bodies. This vulnerability has little to no impa...

CVE-2023-26044: Uncontrolled Resource Consumption

react/http is an event-driven, streaming HTTP client and server implementation for ReactPHP. Previous versions of ReactPHP's HTTP server component contain a potential DoS vulnerability that can cause high CPU load when processing large HTTP request bodies. This vulnerability has little to no impa...

PT-2023-20447

Name of the Vulnerable Software and Affected Versions react/http versions prior to 1.9.0 Description The react/http HTTP server component contains a potential DoS vulnerability that can cause high CPU load when processing large HTTP request bodies. This vulnerability has little to no impact on th...

MAL-2023-1204 Malicious code in hyrule-react-commons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3b82bec5139c178e3b425e5e458a9c7b248b17db5192cf6178702cbb26822dba The OpenSSF Package Analysis project identified 'hyrule-react-commons' @ 2.0.1 npm as malicious. It is considered malicious because: - The packa...

Malicious code in hyrule-react-commons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3b82bec5139c178e3b425e5e458a9c7b248b17db5192cf6178702cbb26822dba The OpenSSF Package Analysis project identified 'hyrule-react-commons' @ 2.0.1 npm as malicious. It is considered malicious because: - The packa...

MAL-2023-319 Malicious code in experimental-entrevista-react-01 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5c994de6d5887278ea6db782133b3a5d4d6be0526117b52ed13889bdf94b4537 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in experimental-entrevista-react-01

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in experimental-entrevista-react-01 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5c994de6d5887278ea6db782133b3a5d4d6be0526117b52ed13889bdf94b4537 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-92 Malicious code in anf-core-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d2ebe249c8950dc0c80ca568e821fa11d3759cb87a76ff9e5813bcc3d5ab938b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in anf-core-react

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in anf-core-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d2ebe249c8950dc0c80ca568e821fa11d3759cb87a76ff9e5813bcc3d5ab938b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-728 Malicious code in react-miscrosoft-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cf09eb4d9a3bff918c5d70b7319f6734bad6fbc2d4c6975462602b53ab6f54e0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-730 Malicious code in react-onei (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 837ceaa824fe4087f1b965f397072bb8bec0a54c59997c5b9a422ba7a7ca1734 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-729 Malicious code in react-ob1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a109565fb7408913332a6480b54b10415a8287a3bb3ee6c8216a89ce0d25cd6a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-726 Malicious code in react-microsoft-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ebbff8e8d6bc53549d890642e4b9625f2177839bdd586402e12331a2d22f9a6d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-727 Malicious code in react-miscosoft-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 83e19123a91cb7a1bd1e4a47d412e34e2235998c8bab60e33662f0fea42e1734 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react-microsoft-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ebbff8e8d6bc53549d890642e4b9625f2177839bdd586402e12331a2d22f9a6d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in react-miscrosoft-ui

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in react-onei (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 837ceaa824fe4087f1b965f397072bb8bec0a54c59997c5b9a422ba7a7ca1734 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...