156 matches found
EUVD-2025-198876
Malicious code in @asyncapi/server-api npm...
MAL-2025-190801 Malicious code in @asyncapi/server-api (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 228ed250759da1a81a55ea29e65821a583726c0c472d925b0c86d4e44e49e002 The package @asyncapi/server-api was found to contain malicious code. Source: ghsa-malware...
Malicious code in @asyncapi/server-api (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 228ed250759da1a81a55ea29e65821a583726c0c472d925b0c86d4e44e49e002 The package @asyncapi/server-api was found to contain malicious code. Source: ghsa-malware...
@react-native-community/cli (18.0.0) potentially affected by CVE-2025-11953 via @react-native-community/cli-server-api (18.0.0)
@react-native-community/cli-server-api NPM version 18.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on @react-native-community/cli-server-api and may be impacted: - @react-native-community/cli 18.0.0 Source cves: CVE-2025-11953 Source advisory:...
@react-native-community/cli (>=19.0.0-alpha.0, <=19.1.1) potentially affected by CVE-2025-11953 via @react-native-community/cli-server-api (>=19.0.0, <=19.1.1)
@react-native-community/cli-server-api NPM version =19.0.0, =19.0.0-alpha.0, =19.1.1 Source cves: CVE-2025-11953 Source advisory: OSV:GHSA-399J-VXMF-HJVR...
@react-native-community/cli (18.0.0) potentially affected by CVE-2025-11953 via @react-native-community/cli-server-api (18.0.0)
@react-native-community/cli-server-api NPM version 18.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on @react-native-community/cli-server-api and may be impacted: - @react-native-community/cli 18.0.0 Source cves: CVE-2025-11953 Source advisory:...
@react-native-community/cli (>=19.0.0-alpha.0, <=19.1.1) potentially affected by CVE-2025-11953 via @react-native-community/cli-server-api (>=19.0.0, <=19.1.1)
@react-native-community/cli-server-api NPM version =19.0.0, =19.0.0-alpha.0, =19.1.1 Source cves: CVE-2025-11953 Source advisory: SNYK:JS-REACTNATIVECOMMUNITYCLISERVERAPI-13836141...
@fluentui-react-native/tester (>=0.170.52, <=0.170.56), @fluentui-react-native/tester-win32-81 (>=0.38.69, <=0.38.70) +3 more potentially affected by CVE-2025-11953 via @react-native-community/cli-server-api (17.0.0)
@react-native-community/cli-server-api NPM version 17.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on @react-native-community/cli-server-api and may be impacted: - @fluentui-react-native/tester =0.170.52, =0.38.69, =0.81.4, =0.81.5, =0.81.35 Source...
EUVD-2021-26228
Malware in sbrugna...
EUVD-2018-5289
Malware in sbrugna...
Linux Distros Unpatched Vulnerability : CVE-2022-24829
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Garden is an automation platform for Kubernetes development and testing. In versions prior to 0.12.39 multiple endpoints did not require authentication. In some...
Linux Distros Unpatched Vulnerability : CVE-2019-2993
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server product of Oracle MySQL component: Server: C API. Supported versions that are affected are 5.7.27 and prior and 8.0.17 and...
Python A2A 路径遍历漏洞
Python A2A is a functional Python library by the individual developer Manoj Desai for implementing Google's A2A protocol. A security vulnerability exists in Python A2A version 0.5.5 and earlier, which stems from a path traversal issue in the function createworkflow in the file...
CVE-2024-3317
An improper access control was identified in the Identity Security Cloud ISC message server API that allowed an authenticated user to exfiltrate job processing metadata opaque messageIDs, work queue depth and counts for other tenants...
CVE-2021-21396
wire-server is an open-source back end for Wire, a secure collaboration platform. In wire-server from version 2021-02-16 and before version 2021-03-02, the client metadata of all users was exposed in the GET /users/list-clients endpoint. The endpoint could be used by any logged in user who could...
CVE-2024-48907
Sematell ReplyOne 7.4.3.0 allows SSRF via the application server API...
CVE-2024-48907
Sematell ReplyOne 7.4.3.0 allows SSRF via the application server API...
CVE-2024-48907
Sematell ReplyOne 7.4.3.0 allows SSRF via the application server API...
CVE-2024-48907
Sematell ReplyOne version 7.4.3.0 is vulnerable to Server-Side Request Forgery (SSRF) via the application server API. This vulnerability allows an attacker to manipulate the server into making unauthorized requests. To mitigate the risk, it is recommended to restrict access to the application ser...
