MAL-2025-46129 Malicious code in spica-subscription-magnetosphere-parallax (npm)

The package spica-subscription-magnetosphere-parallax was found to contain malicious code...

MAL-2025-46160 Malicious code in subscription-test-semantic-ui-tailwindcss (npm)

The package subscription-test-semantic-ui-tailwindcss was found to contain malicious code...

MAL-2025-43879 Malicious code in config-subscription-quasar-await (npm)

The package config-subscription-quasar-await was found to contain malicious code...

Malicious code in spica-subscription-magnetosphere-parallax (npm)

The package spica-subscription-magnetosphere-parallax was found to contain malicious code...

Malicious code in subscription-bootstrap-publish-semantic-release (npm)

The package subscription-bootstrap-publish-semantic-release was found to contain malicious code...

Malicious code in subscription-test-semantic-ui-tailwindcss (npm)

The package subscription-test-semantic-ui-tailwindcss was found to contain malicious code...

MAL-2025-46158 Malicious code in subscription-bootstrap-publish-semantic-release (npm)

The package subscription-bootstrap-publish-semantic-release was found to contain malicious code...

MAL-2025-43673 Malicious code in buffer-sqlite-titan-subscription (npm)

The package buffer-sqlite-titan-subscription was found to contain malicious code...

Malicious code in config-subscription-quasar-await (npm)

The package config-subscription-quasar-await was found to contain malicious code...

Malicious code in elektra-subscription-webdriver-manager-kastra (npm)

The package elektra-subscription-webdriver-manager-kastra was found to contain malicious code...

Malicious code in subscription-draco-writable-graphql (npm)

The package subscription-draco-writable-graphql was found to contain malicious code...

MAL-2025-46159 Malicious code in subscription-draco-writable-graphql (npm)

The package subscription-draco-writable-graphql was found to contain malicious code...

MAL-2025-44126 Malicious code in elektra-subscription-webdriver-manager-kastra (npm)

The package elektra-subscription-webdriver-manager-kastra was found to contain malicious code...

Improper Access Control

github.com/mattermost/mattermost-plugin-confluence is vulnerable to Improper Access Control. The vulnerability is due to missing access checks on the Confluence space when editing subscriptions, which allows an attacker to modify subscriptions for spaces they do not have access to via the edit...

Improper Access Control

github.com/mattermost/mattermost-plugin-confluence is vulnerable to Improper Access Control. The vulnerability is due to a failure to verify user access to a channel, which allows an attacker to retrieve channel subscription details without proper authorization via the API endpoint...

Linux Distros Unpatched Vulnerability : CVE-2021-3585

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in openstack-tripleo-heat-templates. Plain passwords from RHSM exist in the logs during OSP13 deployment with subscription-manager. CVE-2021-35...

Linux Distros Unpatched Vulnerability : CVE-2019-14831

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in Moodle 3.7 to 3.7.1, 3.6 to 3.6.5, 3.5 to 3.5.7 and earlier unsupported versions, where forum subscribe link contained an open...

Missing Authorization

Mattermost Confluence Plugin is vulnerable to Missing Authorization. The vulnerability is due to missing authorization checks due to failure to validate user access to Confluence spaces before allowing subscription creation via the create subscription endpoint...

Denial Of Service (DoS)

github.com/mattermost/mattermost-plugin-confluence is vulnerable to Denial of Service DoS. The vulnerability is due to improper handling of unexpected request bodies, which allows an attacker to repeatedly send invalid data to the channel subscription endpoint and crash the plugin...

Improper Authorization

github.com/mattermost/mattermost-plugin-confluence is vulnerable to improper authorization. The vulnerability is due to failing to check user authorization in the Mattermost instance, which allows an attacker to create a channel subscription without proper authorization via an API call to the...