Lucene search
K

15 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2025/06/20 3:47 p.m.3 views

Malicious code in next-sweetalert2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a8045e5172fb2ccb88fcd16b2a66207ca2896e30031828b942dffcf423ebbb6d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
Exploits0References1
OSV
OSV
added 2023/07/10 7:8 p.m.8 views

GHSA-MRR8-V49W-3333 sweetalert2 contains potentially undesirable behavior

sweetalert2 versions from 11.6.14 to before 11.22.4 have potentially undesirable behavior. The package outputs audio and/or video messages that do not pertain to the functionality of the package when run on specific tlds. This functionality is documented on the project's readme...

5.9AI score
Exploits0References6
Github Security Blog
Github Security Blog
added 2023/07/10 7:8 p.m.213 views

sweetalert2 contains potentially undesirable behavior

sweetalert2 versions from 11.6.14 to before 11.22.4 have potentially undesirable behavior. The package outputs audio and/or video messages that do not pertain to the functionality of the package when run on specific tlds. This functionality is documented on the project's readme...

7AI score
Exploits0References6Affected Software1
Positive Technologies
Positive Technologies
added 2023/07/10 12:0 a.m.1 views

PT-2023-33044 · Unknown · Sweetalert2

Name of the Vulnerable Software and Affected Versions: sweetalert2 versions 11.6.14 and above Description: The sweetalert2 package exhibits potentially undesirable behavior by outputting audio and/or video messages unrelated to its functionality when run on specific top-level domains TLDs. This...

7.1AI score
Exploits0References4
Github Security Blog
Github Security Blog
added 2022/11/23 3:49 p.m.67 views

sweetalert2 v8.19.1 and above contains hidden functionality

sweetalert2 versions 8.19.1 and up until 9.0.0 are vulnerable to hidden functionality that was introduced by the maintainer. The package outputs audio and/or video messages that do not pertain to the functionality of the package and is not included in versions below 8.19.1. Workaround Users who a...

7AI score
Exploits0References4Affected Software1
OSV
OSV
added 2022/11/23 3:44 p.m.3 views

GHSA-PG98-6V7F-2XFV sweetalert2 v9.17.4 and above contains hidden functionality

sweetalert2 versions 9.17.4 and up until 10.0.0 are vulnerable to hidden functionality that was introduced by the maintainer. The package outputs audio and/or video messages that do not pertain to the functionality of the package and is not included in versions 9.0.0 - 9.17.3. Workaround Users wh...

5.9AI score
Exploits0References3
Github Security Blog
Github Security Blog
added 2022/11/23 3:44 p.m.109 views

sweetalert2 v9.17.4 and above contains hidden functionality

sweetalert2 versions 9.17.4 and up until 10.0.0 are vulnerable to hidden functionality that was introduced by the maintainer. The package outputs audio and/or video messages that do not pertain to the functionality of the package and is not included in versions 9.0.0 - 9.17.3. Workaround Users wh...

7AI score
Exploits0References3Affected Software1
Github Security Blog
Github Security Blog
added 2022/11/23 3:39 p.m.30 views

sweetalert2 v10.16.10 and above contains hidden functionality

sweetalert2 versions 10.16.10 and up until 11.0.0 are vulnerable to hidden functionality that was introduced by the maintainer. The package outputs audio and/or video messages that do not pertain to the functionality of the package and is not included in versions 10.0.0 - 10.16.9. Workaround Use ...

3.5AI score
Exploits0References3Affected Software1
OSV
OSV
added 2022/11/23 3:39 p.m.3 views

GHSA-457R-CQC8-9VJ9 sweetalert2 v10.16.10 and above contains hidden functionality

sweetalert2 versions 10.16.10 and up until 11.0.0 are vulnerable to hidden functionality that was introduced by the maintainer. The package outputs audio and/or video messages that do not pertain to the functionality of the package and is not included in versions 10.0.0 - 10.16.9. Workaround Use ...

5.9AI score
Exploits0References3
Github Security Blog
Github Security Blog
added 2022/11/23 3:26 p.m.25 views

sweetalert2 v11.4.9 and above contains hidden functionality

sweetalert2 versions 11.4.9 and above are vulnerable to hidden functionality that was introduced by the maintainer. The package outputs audio and/or video messages that do not pertain to the functionality of the package and is not included in versions 11.0.0 - 11.4.8. Workaround Use a version...

3.5AI score
Exploits0References3Affected Software1
OSV
OSV
added 2022/11/23 3:26 p.m.0 views

GHSA-QQ6H-5G6J-Q3CM sweetalert2 v11.4.9 and above contains hidden functionality

sweetalert2 versions 11.4.9 and above are vulnerable to hidden functionality that was introduced by the maintainer. The package outputs audio and/or video messages that do not pertain to the functionality of the package and is not included in versions 11.0.0 - 11.4.8. Workaround Use a version...

5.9AI score
Exploits0References3
Positive Technologies
Positive Technologies
added 2022/11/23 12:0 a.m.2 views

PT-2022-28188 · Unknown · Sweetalert2

Name of the Vulnerable Software and Affected Versions: sweetalert2 versions 10.16.10 through 11.0.0 Description: The issue concerns hidden functionality introduced by the maintainer, causing the package to output audio and/or video messages unrelated to its intended functionality. Recommendations...

7.2AI score
Exploits0References4
Positive Technologies
Positive Technologies
added 2022/11/23 12:0 a.m.2 views

PT-2022-28273 · Unknown · Sweetalert2

Name of the Vulnerable Software and Affected Versions: sweetalert2 versions 11.4.9 and above Description: The issue concerns hidden functionality introduced by the maintainer, causing the package to output audio and/or video messages unrelated to its intended functionality. Recommendations: For...

7.2AI score
Exploits0References4
Positive Technologies
Positive Technologies
added 2022/11/23 12:0 a.m.4 views

PT-2022-28269 · Unknown · Sweetalert2

Name of the Vulnerable Software and Affected Versions: sweetalert2 versions 9.17.4 through 10.0.0 Description: The issue concerns hidden functionality introduced by the maintainer, causing the package to output audio and/or video messages unrelated to its intended functionality. Recommendations:...

7.2AI score
Exploits0References4
Positive Technologies
Positive Technologies
added 2022/11/23 12:0 a.m.2 views

PT-2022-28220 · Unknown · Sweetalert2

Name of the Vulnerable Software and Affected Versions: sweetalert2 versions 8.19.1 through 9.0.0 Description: The issue concerns hidden functionality introduced by the maintainer, causing the package to output audio and/or video messages unrelated to its intended functionality. This behavior is n...

7.1AI score
Exploits0References4
Rows per page
Query Builder