375 matches found
CVE-2025-62487 Under certain configurations, file artifacts uploaded to the Dossier and Slides apps did not inherit security markings of their parent artifact. This lack of security markings could lead to unintended access to the uploaded files.
On October 1, 2025, Palantir discovered that images uploaded through the Dossier front-end app were not being marked correctly with the proper security levels. The regression was traced back to a change in May 2025, which was meant to allow file uploads to be shared among different artifacts e.g...
CVE-2025-62487 Under certain configurations, file artifacts uploaded to the Dossier and Slides apps did not inherit security markings of their parent artifact. This lack of security markings could lead to unintended access to the uploaded files.
On October 1, 2025, Palantir discovered that images uploaded through the Dossier front-end app were not being marked correctly with the proper security levels. The regression was traced back to a change in May 2025, which was meant to allow file uploads to be shared among different artifacts e.g...
CVE-2025-62487
CVE-2025-62487 affects Palantir Dossier and Slides apps (Dossier front-end). Root cause: a May 2025 change intended to enable cross-artifact file sharing caused uploads to not be properly marked with security levels. In CBAC-enabled deployments, a security picker dialog lets users set the level, ...
CVE-2025-23919
Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in Ella Van Durpe Slides & Presentations slide allows Code Injection.This issue affects Slides & Presentations: from n/a through = 0.0.39...
PT-2026-1839
Name of the Vulnerable Software and Affected Versions Palantir Dossier and Slides apps affected versions not specified Description Images uploaded through the Dossier front-end app were not consistently marked with the correct security levels. This issue stemmed from a change implemented in May...
EUVD-2025-175937
Malicious code in titan-fusion-virgo-slides npm...
EUVD-2025-176156
Malicious code in subscription-asteroid-paleoanthropology-slides npm...
Malicious code in node-sass-slides-koa-hexo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3d901b770938de6417077db7f0e64048574068406c7bf11efcce84fe61d1993 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177641
Malicious code in nestjs-postcss-loader-slides-spinner npm...
EUVD-2025-177650
Malicious code in neptune-vega-slides-browserify npm...
EUVD-2025-176348
Malicious code in slides-callisto-algol-sagitta npm...
EUVD-2025-176570
Malicious code in sadr-membrane-slides-meteor npm...
EUVD-2025-176343
Malicious code in slides-quark-thermochronology-meteor npm...
EUVD-2025-176347
Malicious code in slides-convict-husky-kaus npm...
EUVD-2025-176273
Malicious code in spawn-webpack-nightwatch-slides npm...
Malicious code in auth0-scripts-slides-build (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bae3dd049724262a8f2ef9d0819f09a1d834c89820f442c9d3f8332a4b2806f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-180380
Malicious code in apollo-slides-duplex-fornax npm...
EUVD-2025-175909
Malicious code in transform-galaxy-writable-slides npm...
Malicious code in vortex-enceladus-slides-xanthus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 459c37c88702ede938d6aefee367e7cab529ff9cff4c09b2c9bd4ea0e63730fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...