Gogs Vulnerable to Unauthenticated Organization Teams Information Disclosure via API

Summary Gogs has an unauthenticated information disclosure vulnerability. The GET /api/v1/orgs/:orgname/teams endpoint at internal/route/api/v1/orgteam.go:8 returns all teams for any organization without requiring authentication. The route group at internal/route/api/v1/api.go:380-385 lacks the...

Malicious code in teams-data (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cc41326c5c886edc6d81289eb2146c7f516700ce8779a55fdfdb4b4127221763 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6442 Malicious code in teams-data (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cc41326c5c886edc6d81289eb2146c7f516700ce8779a55fdfdb4b4127221763 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...