Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS in sanitizer.rb, when allowed tags are overridden to allow both select and style elements. Details Cross-site scripting or XSS is a code vulnerability that occurs when an attacker “injects” a malicious script in...

GHSA-PG8V-G4XQ-HWW9 Rails::Html::Sanitizer vulnerable to Cross-site Scripting

Versions of Rails::Html::Sanitizer prior to version 1.4.3 are vulnerable to XSS with certain configurations of Rails::Html::Sanitizer which allows an attacker to inject content when the application developer has overridden the sanitizer's allowed tags to allow both select and style elements. Code...

Rails::Html::Sanitizer vulnerable to Cross-site Scripting

Versions of Rails::Html::Sanitizer prior to version 1.4.3 are vulnerable to XSS with certain configurations of Rails::Html::Sanitizer which allows an attacker to inject content when the application developer has overridden the sanitizer's allowed tags to allow both select and style elements. Code...

CVE-2022-32209

Possible XSS Vulnerability in Rails::Html::SanitizerThere is a possible XSS vulnerability with certain configurations of Rails::Html::Sanitizer.This vulnerability has been assigned the CVE identifier CVE-2022-32209.Versions Affected: ALLNot affected: NONEFixed Versions: v1.4.3 ImpactA possible XS...

CVE-2022-32209

Possible XSS Vulnerability in Rails::Html::SanitizerThere is a possible XSS vulnerability with certain configurations of Rails::Html::Sanitizer.This vulnerability has been assigned the CVE identifier CVE-2022-32209.Versions Affected: ALLNot affected: NONEFixed Versions: v1.4.3 ImpactA possible XS...

CVE-2022-34179

Jenkins Embeddable Build Status Plugin 2.0.3 and earlier allows specifying a style query parameter that is used to choose a different SVG image style without restricting possible values, resulting in a relative path traversal vulnerability that allows attackers without Overall/Read permission to...

Malicious Package

Overview ruby-style-guide is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package...

[SECURITY] Fedora 35 Update: golang-github-emicklei-restful-3.8.0-1.fc35

Package for building REST-style Web Services using Go...

[SECURITY] Fedora 36 Update: golang-github-emicklei-restful-3.8.0-1.fc36

Package for building REST-style Web Services using Go...

PT-2022-22046 · Jenkins · Jenkins Embeddable Build Status Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Embeddable Build Status Plugin versions 2.0.3 and earlier Description: The issue allows attackers without Overall/Read permission to specify paths to other SVG images on the Jenkins controller file system by exploiting a relative path...

Malicious code in iss-azure-style (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ddb1ed4fc5691644616c46ab640b65a1795b01c150be473a82170f8a93e22caf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3973 Malicious code in iss-azure-style (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ddb1ed4fc5691644616c46ab640b65a1795b01c150be473a82170f8a93e22caf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in frontend-style (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 09155decce648bd9a7851f5dff6d5483e4044da7569e549990b84b7de8f566ee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3232 Malicious code in frontend-style (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 09155decce648bd9a7851f5dff6d5483e4044da7569e549990b84b7de8f566ee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @exnessimo/style (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 61d6394b8b47eeb20d3269c543dbf0a4fda44c7c9ff7fcbb41bf507beba25d48 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-258 Malicious code in @exnessimo/style (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 61d6394b8b47eeb20d3269c543dbf0a4fda44c7c9ff7fcbb41bf507beba25d48 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azure-api-style-guide (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 257d088a2c56246e87ea0068e7e5ffa617d5f06a13dac71c7aca131ab34dcf04 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1234 Malicious code in azure-api-style-guide (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 257d088a2c56246e87ea0068e7e5ffa617d5f06a13dac71c7aca131ab34dcf04 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ruby-style-guide (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 89cf2431bf1e33c39071abae67176324ffcd08f4b09f2abacaac469dd4c41f4c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5861 Malicious code in ruby-style-guide (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 89cf2431bf1e33c39071abae67176324ffcd08f4b09f2abacaac469dd4c41f4c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...