373 matches found
CVE-2025-62487
CVE-2025-62487 affects Palantir Dossier and Slides apps (Dossier front-end). Root cause: a May 2025 change intended to enable cross-artifact file sharing caused uploads to not be properly marked with security levels. In CBAC-enabled deployments, a security picker dialog lets users set the level, ...
CVE-2025-23919
Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in Ella Van Durpe Slides & Presentations slide allows Code Injection.This issue affects Slides & Presentations: from n/a through = 0.0.39...
PT-2026-1839
Name of the Vulnerable Software and Affected Versions Palantir Dossier and Slides apps affected versions not specified Description Images uploaded through the Dossier front-end app were not consistently marked with the correct security levels. This issue stemmed from a change implemented in May...
Malicious code in vortex-enceladus-slides-xanthus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 459c37c88702ede938d6aefee367e7cab529ff9cff4c09b2c9bd4ea0e63730fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-175937
Malicious code in titan-fusion-virgo-slides npm...
Malicious code in auth0-scripts-slides-build (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bae3dd049724262a8f2ef9d0819f09a1d834c89820f442c9d3f8332a4b2806f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176156
Malicious code in subscription-asteroid-paleoanthropology-slides npm...
EUVD-2025-175909
Malicious code in transform-galaxy-writable-slides npm...
EUVD-2025-180380
Malicious code in apollo-slides-duplex-fornax npm...
Malicious code in node-sass-slides-koa-hexo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3d901b770938de6417077db7f0e64048574068406c7bf11efcce84fe61d1993 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176348
Malicious code in slides-callisto-algol-sagitta npm...
EUVD-2025-177641
Malicious code in nestjs-postcss-loader-slides-spinner npm...
EUVD-2025-176570
Malicious code in sadr-membrane-slides-meteor npm...
EUVD-2025-176347
Malicious code in slides-convict-husky-kaus npm...
EUVD-2025-178983
Malicious code in exobiology-callback-commitlint-config-angular-slides npm...
EUVD-2025-176343
Malicious code in slides-quark-thermochronology-meteor npm...
EUVD-2025-177650
Malicious code in neptune-vega-slides-browserify npm...
EUVD-2025-176273
Malicious code in spawn-webpack-nightwatch-slides npm...
MAL-2025-189938 Malicious code in titan-fusion-virgo-slides (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4501f11a2deae04085746254e3f775d5d1da1b5a90819236beb332f1930c3d1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...