6 matches found
Malicious code in tailwind-style-override (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f70c1280fa4f70d4161ef2634dd7eb7f7b59b51cac954465a8d1aad2a1ae5763 The package tailwind-style-override was found to contain malicious code...
MAL-2025-191594 Malicious code in tailwind-style-override (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f70c1280fa4f70d4161ef2634dd7eb7f7b59b51cac954465a8d1aad2a1ae5763 The package tailwind-style-override was found to contain malicious code...
Malicious Package
Overview tailwind-style-override is a malicious package. This package contains malicious code associated with a social engineering campaign called "Contagious Interview." The attackers target developers through fake job interviews or coding test assignments that require the installation of this...
CVE-2024-47541
GStreamer is a library for constructing graphs of media-handling components. An OOB-write vulnerability has been identified in the gstssaparseremoveoverridecodes function of the gstssaparse.c file. This function is responsible for parsing and removing SSA SubStation Alpha style override codes,...
UBUNTU-CVE-2024-53985
rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications. There is a possible XSS vulnerability with certain configurations of Rails::HTML::Sanitizer 1.6.0 when used with Rails = 7.1.0 and Nokogiri 1.15.7, or 1.16.x 1.16.8. The XSS vulnerability with certain...
Cross-site Scripting (XSS)
rails-html-sanitizer is vulnerable to cross-site scripting attacks. An attacker is able to inject and execute malicious javascript through the sanitizecss function when the library is configured to override the style tags to allow both select and style elements...