MAL-2026-4541 Malicious code in crypto-hash-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 208571de648a5ef9d7b4ae7b6f83151d9c2272f75fc16b42faa75a352ded2e08 Package name and metadata impersonate Sindre Sorhus's legitimate crypto-hash package forged author Sindre Sorhus and repository...

file type 安全漏洞

File type is a file type detection tool developed by Sindre Sorhus. Versions of File type prior to 21.3.1 had security vulnerabilities. These vulnerabilities stemmed from the ASF file type detection parser, which might enter an infinite loop when processing specially crafted inputs, potentially...

Sindre Sorhus IS-SVG 安全漏洞

Sindre Sorhus is-svg is Sindre Sorhus an open source application. It provides functions to check whether a string or buffer is SVG. A security vulnerability exists in IS-SVG that stems from a Regular Expression Denial of Service ReDOS when the application checks a crafted invalid SVG string...

Sindre Sorhus is-svg 安全漏洞

Sindre Sorhus is-svg is Sindre Sorhus an open source application. Provides a string or buffer to check whether the SVG function . A security vulnerability exists in is-svg package 2.1.0 through 4.2.1, which can be exploited by an attacker to supply a malicious string, causing is-svg to be unable ...