Lucene search
K

6 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2026/06/12 7:7 p.m.9 views

Malicious code in theta-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09b0737ff5b0b0768e2314b014529b80609632a38dfdc3a9ad6cfd6ab1da9039 package.json declares postinstall: node dist/index.js, and dist/index.js executes Model.resetor at module top level — meaning both npm install...

6.1AI score
Exploits0References4
OSV
OSV
added 2025/12/15 7:37 p.m.3 views

GO-2025-4208 Fiber Utils UUIDv4 and UUID Silent Fallback to Predictable Values in github.com/gofiber/utils

Fiber Utils UUIDv4 and UUID Silent Fallback to Predictable Values in github.com/gofiber/utils...

9.8CVSS6.8AI score0.00402EPSS
Exploits0References3
EUVD
EUVD
added 2025/12/09 1:47 a.m.4 views

EUVD-2025-201791

Fiber Utils is a collection of common functions created for Fiber. In versions 2.0.0-rc.3 and below, when the system's cryptographic random number generator crypto/rand fails, both functions silently fall back to returning predictable UUID values, including the zero UUID...

9.3CVSS6.3AI score0.00402EPSS
Exploits0References3
Github Security Blog
Github Security Blog
added 2025/12/08 5:57 p.m.9 views

Fiber Utils UUIDv4 and UUID Silent Fallback to Predictable Values

Summary Critical security vulnerabilities exist in both the UUIDv4 and UUID functions of the github.com/gofiber/utils package. When the system's cryptographic random number generator crypto/rand fails, both functions silently fall back to returning predictable UUID values, the zero UUID...

9.8CVSS7.4AI score0.00402EPSS
Exploits0References4Affected Software2
OSV
OSV
added 2025/12/08 5:57 p.m.4 views

GHSA-M98W-CQP3-QCQR Fiber Utils UUIDv4 and UUID Silent Fallback to Predictable Values

Summary Critical security vulnerabilities exist in both the UUIDv4 and UUID functions of the github.com/gofiber/utils package. When the system's cryptographic random number generator crypto/rand fails, both functions silently fall back to returning predictable UUID values, the zero UUID...

9.2CVSS7.3AI score0.00402EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2017/08/23 12:0 a.m.68 views

Juniper Junos SRX MACsec Feature Secure Link Failure Silent Fallback Information Disclosure (JSA10790)

According to its self-reported version and model number, the remote Juniper Junos device is affected by an information disclosure vulnerability in the MACsec feature due to error reporting over an unencrypted link when a secure link cannot be established. An adjacent attacker can exploit this to...

8.1CVSS7.2AI score0.00571EPSS
Exploits0References2
Rows per page
Query Builder