799 matches found
Malicious code in posthog-node (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2ec4a50c0b553e9abbcc25147ad50014cf1488415e1ec8e3234f3e9bb3cc24e The package posthog-node was found to contain malicious code. Source: google-open-source-security...
EUVD-2025-177848
Malicious code in meteor-zephyr-singularitarianism-local npm...
EUVD-2025-50823
Parse Server allows public explain queries which may expose sensitive database performance information and schema details...
EUVD-2025-133941
Malicious code in lookingan-nanakila32 npm...
EUVD-2025-144549
Malicious code in augis-pomdoi9r-osaissc npm...
EUVD-2025-144824
Malicious code in vishalpandey npm...
EUVD-2025-112978
Malicious code in halley-cressida-gacrux-hyperion npm...
EUVD-2025-103096
Malicious code in patria-gorengan8-riris npm...
EUVD-2025-87395
Malicious code in zul-dradag47-miaww npm...
EUVD-2025-80011
Malicious code in wittyhare0xrequest npm...
EUVD-2025-70356
Malicious code in fitri-sate14-ruro npm...
EUVD-2025-64793
Malicious code in contemporarysquirrelz3n npm...
EUVD-2025-65141
Malicious code in boredmanateez3n npm...
EUVD-2025-52540
Malicious code in purring-coral-grouse npm...
EUVD-2025-56652
Malicious code in vida-teh63-sluey npm...
CVE-2025-64502 Parse Server allows public `explain` queries which may expose sensitive database performance information and schema details
Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. The MongoDB explain method provides detailed information about query execution plans, including index usage, collection scanning behavior, and performance metrics. Prior to version 8.5.0-alpha....
CVE-2025-64502 Parse Server allows public `explain` queries which may expose sensitive database performance information and schema details
Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. The MongoDB explain method provides detailed information about query execution plans, including index usage, collection scanning behavior, and performance metrics. Prior to version 8.5.0-alpha....
CVE-2025-64502
Parse Server vulnerability CVE-2025-64502 arises from public explain() queries being allowed before the 8.5.0-alpha.5 release. The MongoDB Explain() output can reveal database schema, field names, index configurations, query optimization details, and execution statistics, which could aid targeted...