10 matches found
EUVD-2026-2663
Malicious code in transitive-req PyPI...
Malicious code in puny-req (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b37178e16f3045461008067eca9077a2b41c9c0809b2fd8b3082038a7b74ab3 The package puny-req was found to contain malicious code. Source: ghsa-malware 4ed85c7d479a94c8140d2a0d11769e23097d68af45d550610438f446986c3cbb Any...
MAL-2025-5947 Malicious code in pino-req (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2659b9b4bc1c25e48f12927e3b920f8b1eacccf6ddd951b110537a31a062ccf5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2024-45258
The req package before 3.43.4 for Go may send an unintended request when a malformed URL is provided, because cleanHost in http.go intentionally uses a "garbage in, garbage out" design...
CVE-2024-45258
The req package before 3.43.4 for Go may send an unintended request when a malformed URL is provided, because cleanHost in http.go intentionally uses a "garbage in, garbage out" design...
CVE-2024-45258
The req package before 3.43.4 for Go may send an unintended request when a malformed URL is provided, because cleanHost in http.go intentionally uses a "garbage in, garbage out" design...
PT-2024-31514 · Req · Req
Name of the Vulnerable Software and Affected Versions: req package versions prior to 3.43.4 Description: The req package may send an unintended request when a malformed URL is provided, due to the cleanHost function in http.go using a "garbage in, garbage out" design. This can lead to security...
CVE-2024-45258
The req package for Go (versions prior to 3.43.4 ) is vulnerable to Improper Input Validation due to the cleanHost function in http.go. This function intentionally uses a "garbage in, garbage out" design, which fails to effectively handle malformed URLs . Consequently, the library may send HTTP r...
