5086 matches found
Missing Authorization
Overview Affected versions of this package are vulnerable to Missing Authorization via the CREATE STATISTICS command. A table owner can exploit this vulnerability by creating a statistics object in an arbitrary schema, blocking other users with valid CREATE privileges from creating a statistics...
CVE-2025-12817 PostgreSQL CREATE STATISTICS does not check for schema CREATE privilege
Missing authorization in PostgreSQL CREATE STATISTICS command allows a table owner to achieve denial of service against other CREATE STATISTICS users by creating in any schema. A later CREATE STATISTICS for the same name, from a user having the CREATE privilege, would then fail. Versions before...
Prototype Pollution
json-schema-editor-visual is vulnerable to Prototype Pollution. The vulnerability is due to insufficient validation of user-supplied input in the setData and deleteData functions, which allows an attacker to supply a crafted payload to inject or delete properties on Object.prototype, potentially...
Malicious code in chai-schema-plutology-eclipse (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1af430a378f890314e0bea7438fcf10fcaf30c0fc8e9081257df836dd6841a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in sagitta-schema-release-it-husky (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e806b764b2423062a8953ab5a69c4836580fe7b128531cebe88d4b643a30555 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176974
Malicious code in protractor-nightwatch-schema-bootstrap npm...
EUVD-2025-176874
Malicious code in quantum-darkmatter-native-schema npm...
EUVD-2025-176502
Malicious code in schema-bunyan-magnetar-bootstrap npm...
EUVD-2025-176501
Malicious code in schema-dependencies-paleoanthropology-xenos npm...
EUVD-2025-178049
Malicious code in local-ariel-elara-schema npm...
EUVD-2025-179648
Malicious code in command-prettier-stylelint-server-schema npm...
EUVD-2025-179477
Malicious code in cryptography-webdriver-manager-schema-test npm...
EUVD-2025-179226
Malicious code in dynamo-schema-higgs-geoarchaeology npm...
EUVD-2025-179785
Malicious code in chalk-mira-procyon-schema npm...
EUVD-2025-179526
Malicious code in cosmology-schema-morgan-canopus npm...
MAL-2025-189321 Malicious code in sagitta-schema-release-it-husky (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e806b764b2423062a8953ab5a69c4836580fe7b128531cebe88d4b643a30555 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176499
Malicious code in schema-wasat-development-bellatrix npm...
MAL-2025-186747 Malicious code in enif-axios-schema-biotechnology (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1aa20538098eb6552d01fad1a88faa22ff2b7e24c3c19f05a7101d9ebbf5dda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...