nodejs-json-schema: Prototype pollution vulnerability

The json-schema Node.JS library was vulnerable to prototype pollution during the validation of a JSON object. An attacker, able to provide a specially crafted JSON file for validation, could use this flaw to modify the behavior of the node program, to, for example, execute arbitrary code...

OpenAPI Permissive Input Validation

OpenAPI specification is an API description format for REST APIs. An OpenAPI file is written in YAML or JSON and describes all the API properties like the available endpoints with the related operations or the authentication methods. The Schema object allows the definition of input and output dat...

Malicious Package

Overview en-conduit-schema is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package...

Malicious Package

Overview yelp-schema-design is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this packag...

Malicious Package

Overview schema-render is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Note: This malicious package was uncovered by one of...

nodejs-json-schema: Prototype pollution vulnerability

The json-schema Node.JS library was vulnerable to prototype pollution during the validation of a JSON object. An attacker, able to provide a specially crafted JSON file for validation, could use this flaw to modify the behavior of the node program, to, for example, execute arbitrary code...

ASUS Control Center SQL Injection Vulnerability

ASUS Control Center is a new centralized IT management software from ASUS China. The software can monitor and control ASUS servers, workstations. A SQL injection vulnerability exists in ASUS Control Center v1.4.2.5. An attacker can exploit this vulnerability to inject SQL commands into specific A...

Malicious code in analytics-event-schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6413608ce165b2a652105482d20f1f57fe22418225f040746354d767e25b8a55 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-985 Malicious code in analytics-event-schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6413608ce165b2a652105482d20f1f57fe22418225f040746354d767e25b8a55 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in feedback-schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0ce3047c466c30d8bf8684b6bedb5286b46a6addb1502e7f64e70afcac31131c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3001 Malicious code in feedback-schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0ce3047c466c30d8bf8684b6bedb5286b46a6addb1502e7f64e70afcac31131c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @mcm-schema/valaution-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a80d202af499ca234ed5219bc2a6e5acc3581d10abfb940997a457a5d55b36e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5963 Malicious code in schema-plugin-flow (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 70232e33e5a2e85b6f33884f9f06cd4749582a84331debd9bac517830afe5b72 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in schema-plugin-flow (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 70232e33e5a2e85b6f33884f9f06cd4749582a84331debd9bac517830afe5b72 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azure-schema-registry-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 88a72b71ca48e96c680dd314733c290457a41ccb6bfc94e1fec0e5ccbc390fc3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azure-schema-registry-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware af36c5bd9bf5360c7c6a55c0d30ada65c57855871fa975f43b44d344252a0999 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azure-schema-registry-avro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 25017be6d6a61569e0ed350140bf9b3dbbe967f00da6fba0b1a4ad7894b80c39 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1370 Malicious code in azure-schema-registry-avro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 25017be6d6a61569e0ed350140bf9b3dbbe967f00da6fba0b1a4ad7894b80c39 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azure-schema-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7239e76ddb4f76c58831d67f5b00cd12ddfa0885130a183f98b0e108f228348e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1369 Malicious code in azure-schema-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7239e76ddb4f76c58831d67f5b00cd12ddfa0885130a183f98b0e108f228348e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...