8 matches found
Malicious code in semantic_search_client (crates.io)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2495e4537e60cafc5bc13f96987b82749fce367078ee036e3e4fb4421b5bdf4c The OpenSSF Package Analysis project identified 'semantic-search-client' @ 99.0.1 crates.io as malicious. It is considered malicious because: -...
MAL-2026-3102 Malicious code in semantic_search_client (crates.io)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2495e4537e60cafc5bc13f96987b82749fce367078ee036e3e4fb4421b5bdf4c The OpenSSF Package Analysis project identified 'semantic-search-client' @ 99.0.1 crates.io as malicious. It is considered malicious because: -...
MAL-2025-14727 Malicious code in applications.services.devcloud.image-search-client (npm)
The package applications.services.devcloud.image-search-client was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...
Malicious code in applications.services.devcloud.image-search-client (npm)
The package applications.services.devcloud.image-search-client was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...
Malicious code in resultstore-search-client (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 85736ae7368ae102434c7881aa59599a9d612a91f34c7b4f443f3604c21f60c8 The OpenSSF Package Analysis project identified 'resultstore-search-client' @ 1.0.1 npm as malicious. It is considered malicious because: - The...
MAL-2024-11840 Malicious code in resultstore-search-client (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 85736ae7368ae102434c7881aa59599a9d612a91f34c7b4f443f3604c21f60c8 The OpenSSF Package Analysis project identified 'resultstore-search-client' @ 1.0.1 npm as malicious. It is considered malicious because: - The...
readthedocs-sphinx-search vulnerable to cross-site scripting when including search results from malicious projects
Impact This vulnerability could have allowed an attacker to include arbitrary HTML content in search results by having a user search a malicious project. This was due to our search client not correctly escaping all user content from search results. You can find more information in the advisory...
SUSE CVE-2018-10935
A flaw was found in the 389 Directory Server that allows users to cause a crash in the LDAP server using ldapsearch with server side sort...