CVE-2022-37265

Prototype pollution vulnerability in stealjs steal 2.2.4 via the alias variable in babel.js...

CVE-2022-37266

Prototype pollution vulnerability in function extend in babel.js in stealjs steal 2.2.4 via the key variable in babel.js...

CVE-2022-37257

Prototype pollution vulnerability in function convertLater in npm-convert.js in stealjs steal 2.2.4 via the requestedVersion variable in npm-convert.js...

CVE-2022-37262

A Regular Expression Denial of Service ReDoS flaw was found in stealjs steal 2.2.4 via the source and sourceWithComments variable in main.js...

EUVD-2022-6831

Malicious code in bioql PyPI...

EUVD-2022-6742

Malicious code in bioql PyPI...

EUVD-2022-6961

Malicious code in bioql PyPI...

EUVD-2022-6658

Malicious code in bioql PyPI...

EUVD-2022-6751

Malicious code in bioql PyPI...

EUVD-2022-6731

Malicious code in bioql PyPI...

EUVD-2022-6935

Malicious code in bioql PyPI...

EUVD-2022-6952

Malicious code in bioql PyPI...

CVE-2022-37258

Prototype pollution vulnerability in function convertLater in npm-convert.js in stealjs steal 2.2.4 via the packageName variable in npm-convert.js...

CVE-2022-37260

A Regular Expression Denial of Service ReDoS flaw was found in stealjs steal 2.2.4 via the input variable in main.js...

CVE-2022-37259

A Regular Expression Denial of Service ReDoS flaw was found in stealjs steal 2.2.4 via the string variable in babel.js...

CVE-2022-37264

Prototype pollution vulnerability in stealjs steal 2.2.4 via the optionName variable in main.js...

OpenCats 跨站脚本漏洞

steal is StealJS open source an extensible general-purpose module loader . It can load JavaScript modules defined in ES6, AMD and CommonJS formats. A security vulnerability exists in OpenCats version 0.9.6 that stems from improper input neutralization and can be exploited by an attacker to steal...

GHSA-RGQX-226F-2XP4 steal Inefficient Regular Expression Complexity vulnerability via string variable

A Regular Expression Denial of Service ReDoS flaw was found in stealjs steal 2.2.4 via the string variable in babel.js...

steal Inefficient Regular Expression Complexity vulnerability via string variable

A Regular Expression Denial of Service ReDoS flaw was found in stealjs steal 2.2.4 via the string variable in babel.js...

GHSA-WC4X-QMR2-RJ8H steal vulnerable to Prototype Pollution via alias variable

Prototype pollution vulnerability in stealjs steal via the alias variable in babel.js...