Malicious code in upm-template-utils (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2024-8706

A vulnerability was found in JFinalCMS up to 20240903. It has been classified as problematic. This affects the function update of the file /admin/template/update of the component com.cms.util.TemplateUtils. The manipulation of the argument fileName leads to path traversal. It is possible to...

MAL-2022-5732 Malicious code in refocus-sample-generator-template-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 631548c717c3bbe8a8db0c1da07900bc6e8e906501e5ceb3a4c850a7f33351b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...