5064 matches found
Missing Authorization
Overview Affected versions of this package are vulnerable to Missing Authorization via the CREATE STATISTICS command. A table owner can exploit this vulnerability by creating a statistics object in an arbitrary schema, blocking other users with valid CREATE privileges from creating a statistics...
CVE-2025-12817 PostgreSQL CREATE STATISTICS does not check for schema CREATE privilege
Missing authorization in PostgreSQL CREATE STATISTICS command allows a table owner to achieve denial of service against other CREATE STATISTICS users by creating in any schema. A later CREATE STATISTICS for the same name, from a user having the CREATE privilege, would then fail. Versions before...
CVE-2025-12817
CVE-2025-12817 is addressed in multiple PostgreSQL security advisories. The issue is missing authorization in CREATE STATISTICS, allowing a table owner to cause denial of service for other CREATE STATISTICS users by creating in any schema; a subsequent CREATE STATISTICS using the same name can fa...
CVE-2025-12817 PostgreSQL CREATE STATISTICS does not check for schema CREATE privilege
Missing authorization in PostgreSQL CREATE STATISTICS command allows a table owner to achieve denial of service against other CREATE STATISTICS users by creating in any schema. A later CREATE STATISTICS for the same name, from a user having the CREATE privilege, would then fail. Versions before...
CVE-2025-12817
Missing authorization in PostgreSQL CREATE STATISTICS command allows a table owner to achieve denial of service against other CREATE STATISTICS users by creating in any schema. A later CREATE STATISTICS for the same name, from a user having the CREATE privilege, would then fail. Versions before...
Prototype Pollution
json-schema-editor-visual is vulnerable to Prototype Pollution. The vulnerability is due to insufficient validation of user-supplied input in the setData and deleteData functions, which allows an attacker to supply a crafted payload to inject or delete properties on Object.prototype, potentially...
Malicious code in chai-schema-plutology-eclipse (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1af430a378f890314e0bea7438fcf10fcaf30c0fc8e9081257df836dd6841a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in sagitta-schema-release-it-husky (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e806b764b2423062a8953ab5a69c4836580fe7b128531cebe88d4b643a30555 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176974
Malicious code in protractor-nightwatch-schema-bootstrap npm...
EUVD-2025-176874
Malicious code in quantum-darkmatter-native-schema npm...
EUVD-2025-176502
Malicious code in schema-bunyan-magnetar-bootstrap npm...
EUVD-2025-176501
Malicious code in schema-dependencies-paleoanthropology-xenos npm...
EUVD-2025-176500
Malicious code in schema-terser-prompts-rollup npm...
EUVD-2025-178292
Malicious code in jasmine-metalsmith-schema-sirius npm...
EUVD-2025-178049
Malicious code in local-ariel-elara-schema npm...
EUVD-2025-179648
Malicious code in command-prettier-stylelint-server-schema npm...
EUVD-2025-179477
Malicious code in cryptography-webdriver-manager-schema-test npm...
EUVD-2025-179226
Malicious code in dynamo-schema-higgs-geoarchaeology npm...