CVE-2026-28511

eLabFTW is an open source electronic lab notebook. Prior to version 5.4.2, in certain cases, an authenticated user performing a numeric reference/search can return results that include resources the requesting user is not authorized to view. The exposed information is limited only the title...

Malicious code in jcatalog-react-reference-search (npm)

The package jcatalog-react-reference-search was found to contain malicious code...

MAL-2025-23707 Malicious code in jcatalog-react-reference-search (npm)

The package jcatalog-react-reference-search was found to contain malicious code...