EUVD-2021-0866

Malware in sbrugna...

Malicious code in scully (npm)

The package scully was found to contain malicious code...

MAL-2025-32845 Malicious code in scully (npm)

The package scully was found to contain malicious code...

scully.ie Cross Site Scripting vulnerability OBB-4033176

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

@scullyio/init (>=1.0.0-beta.4 <=1.1.0), @scullyio/scully-plugin-base-href-rewrite (=0.0.1) +3 more potentially affected by CVE-2020-28470 via @scullyio/scully (>=0.0.72 <=1.0.11)

@scullyio/scully NPM version =0.0.72, =1.0.0-beta.4, =1.0.0, =0.0.1, =1.0.0-beta.4 Source cves: CVE-2020-28470 Source advisory: OSV:GHSA-R96P-V3CR-GFV8...

Cross-site Scripting (XSS) in @scullyio/scully

This affects the package @scullyio/scully before 1.0.9. The transfer state is serialised with the JSON.stringify function and then written into the HTML page...

Scullyio Scully Code Execution Vulnerability

Scullyio Scully is a Typescript-based software for building Angular applications organized by Scullyio.Scully pre-renders every page in the application as plain HTML and CSS.To do this, Scully uses guessjs to find all the routes in the project. Scully then accesses each route, renders the view an...

CVE-2020-28470

The CVE-2020-28470 entry affects @scullyio/scully (pre-1.0.9). The issue arises because the transfer state is serialized with JSON.stringify() and written into the HTML page, enabling potential Cross-Site Scripting (XSS) when untrusted data is rendered. The primary impacted component is Scully’s ...

Scullyio Scully 注入漏洞

Scullyio Scully is a Typescript-based software for building Angular applications organized by Scullyio.Scully pre-renders every page in the application as plain HTML and CSS.To do this, Scully uses guessjs to find all the routes in the project. Scully then accesses each route, renders the view an...

@scullyio/init (>=1.0.0-beta.4 <=1.1.0), @scullyio/scully-plugin-google-analytics (>=1.0.0 <=1.0.0-beta.0) potentially affected by CVE-2020-28470 via @scullyio/scully (>=1.0.0-beta.0 <=1.0.11)

@scullyio/scully NPM version =1.0.0-beta.0, =1.0.0-beta.4, =1.0.0, =1.0.0-beta.0 Source cves: CVE-2020-28470 Source advisory: SNYK:JS-SCULLYIOSCULLY-1055829...