49 matches found
CLSA-2025-1763397982 squid34: Fix of CVE-2025-62168
CVE-2025-62168: Redact HTTP authentication credentials in error handling to prevent information disclosure...
squid34: Fix of CVE-2025-62168
CVE-2025-62168: Redact HTTP authentication credentials in error handling to prevent information disclosure...
CLSA-2025-1763370812 squid: Fix of CVE-2025-62168
CVE-2025-62168: fix failure to redact HTTP authentication credentials in error handling to prevent information disclosure...
CLSA-2025-1763031041 squid: Fix of CVE-2025-62168
CVE-2025-62168: fix failure to redact HTTP authentication credentials in error handling to prevent information disclosure...
Malicious code in express-redact (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4f7506bc61afb104333b21673f4899d6ea5e6982fcb1be7623fafcb4f5580a7 The package express-redact was found to contain malicious code. Source: ghsa-malware a883eba91191de6920dc8a2f765112365ac2835f16dd0918d3750d99a89cc9e9...
EUVD-2025-36848
Malicious code in express-redact npm...
MAL-2025-49000 Malicious code in express-redact (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4f7506bc61afb104333b21673f4899d6ea5e6982fcb1be7623fafcb4f5580a7 The package express-redact was found to contain malicious code. Source: ghsa-malware a883eba91191de6920dc8a2f765112365ac2835f16dd0918d3750d99a89cc9e9...
EUVD-2025-31052
Malicious code in bioql PyPI...
Withdrawn Advisory: fast-redact vulnerable to prototype pollution
Withdrawn Advisory This advisory has been withdrawn because the issue uses an internal undocumented utility function. This link is maintained to preserve external references. Original Description fast-redact is a package that provides do very fast object redaction. A Prototype Pollution...
GHSA-FFRW-9MX8-89P8 Withdrawn Advisory: fast-redact vulnerable to prototype pollution
Withdrawn Advisory This advisory has been withdrawn because the issue uses an internal undocumented utility function. This link is maintained to preserve external references. Original Description fast-redact is a package that provides do very fast object redaction. A Prototype Pollution...
CVE-2025-57319
fast-redact is a package that provides do very fast object redaction. A Prototype Pollution vulnerability in the nestedRestore function of fast-redact version 3.5.0 and before allows attackers to inject properties on Object.prototype via supplying a crafted payload, causing denial of service DoS ...
CVE-2025-57319
fast-redact is a package that provides do very fast object redaction. A Prototype Pollution vulnerability in the nestedRestore function of fast-redact version 3.5.0 and before allows attackers to inject properties on Object.prototype via supplying a crafted payload, causing denial of service DoS ...
fast-redact 安全漏洞
fast-redact is an object editing library by the individual developer David Mark Clements. A security vulnerability exists in fast-redact 3.5.0 and earlier versions, which stems from prototype contamination in the nestedRestore function and could lead to a denial of service attack...
CVE-2025-57319
The fast-redact package (version 3.5.0 and before ) contains a Prototype Pollution vulnerability in the nestedRestore function. This flaw allows attackers to inject properties into Object.prototype by supplying a crafted payload, which can result in a denial of service (DoS) . While the supplier ...
CVE-2025-57319
fast-redact is a package that provides do very fast object redaction. A Prototype Pollution vulnerability in the nestedRestore function of fast-redact version 3.5.0 and before allows attackers to inject properties on Object.prototype via supplying a crafted payload, causing denial of service DoS ...
PT-2025-39349
Name of the Vulnerable Software and Affected Versions fast-redact versions prior to 3.5.0 Description A Prototype Pollution issue exists in the nestedRestore function of fast-redact. Attackers can inject properties onto Object.prototype by providing a crafted payload. This can lead to a denial of...
CVE-2025-57319: Undefined Security Weakness
fast-redact is a package that provides do very fast object redaction. A Prototype Pollution vulnerability in the nestedRestore function of fast-redact version 3.5.0 and before allows attackers to inject properties on Object.prototype via supplying a crafted payload, causing denial of service DoS ...
CVE-2025-57319
fast-redact is a package that provides do very fast object redaction. A Prototype Pollution vulnerability in the nestedRestore function of fast-redact version 3.5.0 and before allows attackers to inject properties on Object.prototype via supplying a crafted payload, causing denial of service DoS ...
Jenkins exposes multi-line secrets through error messages
Jenkins Jenkins provides the secretTextarea form field for multi-line secrets. Jenkins 2.478 and earlier, LTS 2.462.2 and earlier does not redact multi-line secret values in error messages generated for form submissions involving the secretTextarea form field. This can result in exposure of...