230 matches found
certighost-cve-2026-54121-slides
Презентация Slidev для Certighost Этот каталог содержит презентацию Slidev для CVE-2026-54121.md. root@kitploit: npm install npm run dev Другие команды: root@kitploit: npm run build npm run export Исходная презентация — slides.md. Стили всей презентации находятся в style.css, а настройки Mermaid ...
CVE-2026-19281
A security flaw has been discovered in adolfosalasgomez3011 slidev-builder-mcp 2.1.0. This affects the function generateChart of the file src/tools/generateAssets.ts of the component generateAssets Tool. Performing a manipulation of the argument outputDir results in command injection. The attack ...
CVE-2026-19281 adolfosalasgomez3011 slidev-builder-mcp generateAssets Tool generateAssets.ts generateChart command injection
A security flaw has been discovered in adolfosalasgomez3011 slidev-builder-mcp 2.1.0. This affects the function generateChart of the file src/tools/generateAssets.ts of the component generateAssets Tool. Performing a manipulation of the argument outputDir results in command injection. The attack ...
EUVD-2026-54780
A security flaw has been discovered in adolfosalasgomez3011 slidev-builder-mcp 2.1.0. This affects the function generateChart of the file src/tools/generateAssets.ts of the component generateAssets Tool. Performing a manipulation of the argument outputDir results in command injection. The attack ...
CVE-2026-19281
CVE-2026-19281 affects the project adolfosalasgomez3011 slidev-builder-mcp version 2.1.0. The vulnerability lies in the function generateChart within the file src/tools/generateAssets.ts of the generateAssets Tool . Manipulating the argument outputDir can trigger a command injection . Exploitatio...
CVE-2026-19281 adolfosalasgomez3011 slidev-builder-mcp generateAssets Tool generateAssets.ts generateChart command injection
A security flaw has been discovered in adolfosalasgomez3011 slidev-builder-mcp 2.1.0. This affects the function generateChart of the file src/tools/generateAssets.ts of the component generateAssets Tool. Performing a manipulation of the argument outputDir results in command injection. The attack ...
CVE-2026-19281
A security flaw has been discovered in adolfosalasgomez3011 slidev-builder-mcp 2.1.0. This affects the function generateChart of the file src/tools/generateAssets.ts of the component generateAssets Tool. Performing a manipulation of the argument outputDir results in command injection. The attack ...
PT-2026-69195
Name of the Vulnerable Software and Affected Versions adolfosalasgomez3011 slidev-builder-mcp version 2.1.0 Description A command injection flaw exists in the generateAssets Tool within the generateChart function located in the src/tools/generateAssets.ts file. This issue occurs when the outputDi...
@slidev-react/cli (>=0.4.6, <=0.5.0), @slidev-react/node (>=0.4.6, <=0.5.0) potentially affected by CVE-2026-53633 via vite-plus (>=0.1.11, <=0.1.19)
vite-plus NPM version =0.1.11, =0.4.6, =0.4.6, =0.5.0 Source cves: CVE-2026-53633 Source advisory: OSV:GHSA-G8MR-85JM-7XHM...
@slidev-react/cli (>=0.4.6, <=0.5.0), @slidev-react/node (>=0.4.6, <=0.5.0) potentially affected by CVE-2026-53632 via vite-plus (>=0.1.11, <=0.1.19)
vite-plus NPM version =0.1.11, =0.4.6, =0.4.6, =0.5.0 Source cves: CVE-2026-53632 Source advisory: OSV:GHSA-V6WH-96G9-6WX3...
@slidev-react/cli (>=0.4.6, <=0.5.0), @slidev-react/node (>=0.4.6, <=0.5.0) potentially affected by CVE-2026-53571 via vite-plus (>=0.1.11, <=0.1.19)
vite-plus NPM version =0.1.11, =0.4.6, =0.4.6, =0.5.0 Source cves: CVE-2026-53571 Source advisory: OSV:GHSA-FX2H-PF6J-XCFF...
@slidev-react/cli (>=0.4.6, <=0.5.0), @slidev-react/node (>=0.4.6, <=0.5.0) potentially affected by CVE-2026-53571 via vite-plus (>=0.1.11, <=0.1.19)
vite-plus NPM version =0.1.11, =0.4.6, =0.4.6, =0.5.0 Source cves: CVE-2026-53571 Source advisory: SNYK:JS-VITEPLUS-17353903...
@slidev-react/cli (>=0.4.6, <=0.4.14), @slidev-react/node (>=0.4.6, <=0.4.14) potentially affected by CVE-2026-41211 via vite-plus (0.1.11)
vite-plus NPM version 0.1.11 is affected by a known vulnerability. The following packages have a transitive dependency on vite-plus and may be impacted: - @slidev-react/cli =0.4.6, =0.4.6, =0.4.14 Source cves: CVE-2026-41211 Source advisory: OSV:GHSA-33R3-4WHC-44C2...
@slidev-react/cli (>=0.4.6, <=0.4.14), @slidev-react/node (>=0.4.6, <=0.4.14) potentially affected by CVE-2026-39365 via vite-plus (0.1.11)
vite-plus NPM version 0.1.11 is affected by a known vulnerability. The following packages have a transitive dependency on vite-plus and may be impacted: - @slidev-react/cli =0.4.6, =0.4.6, =0.4.14 Source cves: CVE-2026-39365 Source advisory: SNYK:JS-VITEPLUS-15922214...
@slidev-react/cli (>=0.4.6, <=0.4.14), @slidev-react/node (>=0.4.6, <=0.4.14) potentially affected by CVE-2026-39364 via vite-plus (0.1.11)
vite-plus NPM version 0.1.11 is affected by a known vulnerability. The following packages have a transitive dependency on vite-plus and may be impacted: - @slidev-react/cli =0.4.6, =0.4.6, =0.4.14 Source cves: CVE-2026-39364 Source advisory: SNYK:JS-VITEPLUS-15922246...
@slidev-react/cli (>=0.4.6, <=0.4.14), @slidev-react/node (>=0.4.6, <=0.4.14) potentially affected by CVE-2026-39363 via vite-plus (0.1.11)
vite-plus NPM version 0.1.11 is affected by a known vulnerability. The following packages have a transitive dependency on vite-plus and may be impacted: - @slidev-react/cli =0.4.6, =0.4.6, =0.4.14 Source cves: CVE-2026-39363 Source advisory: SNYK:JS-VITEPLUS-15922243...
EUVD-2025-176339
Malicious code in slidev-odin-charon-pino-pretty npm...
EUVD-2025-176342
Malicious code in slidev-airbnb-phoebe-library npm...
Malicious code in slidev-odin-charon-pino-pretty (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10a6f20651e71b9191c950fc2cbdba6720c98b9935f61ba97cc07e440604538e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...