PT-2026-51104

Name of the Vulnerable Software and Affected Versions @tinacms/app versions prior to 2.5.6 tinacms versions prior to 3.9.3 Description Cross-origin postMessage handlers allow for stored XSS and session takeover. The software registers window message listeners—specifically the useTina overlay...

EUVD-2025-199092

Malicious code in composite-reducer npm...

MAL-2025-190951 Malicious code in composite-reducer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8eecfe869a6cc75f59e734412ec583d6bb95ddaab6b45c9c22526ba7b556e004 The package composite-reducer was found to contain malicious code. Source: ghsa-malware...

Malicious code in composite-reducer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8eecfe869a6cc75f59e734412ec583d6bb95ddaab6b45c9c22526ba7b556e004 The package composite-reducer was found to contain malicious code. Source: ghsa-malware...

Malicious code in redux-readable-reducer (npm)

The package redux-readable-reducer was found to contain malicious code...

MAL-2025-31950 Malicious code in redux-readable-reducer (npm)

The package redux-readable-reducer was found to contain malicious code...

CVE-2019-1010044

borg-reducer c6d5240 is affected by: Buffer Overflow. The impact is: Possible code execution and denial of service. The component is: Output parameter within the executable...

carpo (>=0.1.2 <=0.1.3), chimper (>=0.1.2 <=0.2.1) +7 more potentially affected by unknown CVE via conrod (>=0.51.1 <=0.61.1)

conrod CARGO version =0.51.1, =0.1.2, =0.1.2, =0.1.0, =1.0.0, =0.1.0, =0.2.0, =1.0.0, =0.1.0, =0.1.4 - turbine =0.0.2 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0397...

CVE-2019-1010044

borg-reducer c6d5240 is affected by: Buffer Overflow. The impact is: Possible code execution and denial of service. The component is: Output parameter within the executable...

CVE-2019-1010044

borg-reducer c6d5240 is affected by: Buffer Overflow. The impact is: Possible code execution and denial of service. The component is: Output parameter within the executable...

CVE-2019-1010044

CVE-2019-1010044 affects borg-reducer c6d5240. The vulnerability is a Buffer Overflow in the output parameter within the executable, leading to possible code execution and denial of service. Documents consistently describe the impact as code execution and DoS with no stated exploit details, affec...

CVE-2019-1010044

borg-reducer c6d5240 is affected by: Buffer Overflow. The impact is: Possible code execution and denial of service. The component is: Output parameter within the executable...