MAL-2022-102 Malicious code in @azure-tests/perf-event-hubs-track-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f33365f9f452d71317e4ca23088d8eb0525f77ec6bb5fb923d01ebf81efa4f4b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @azure-tests/perf-storage-file-share-track-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a77a70aec760d01762f6eea825194c2d558174a44b966b59043ce3f9424626f0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @azure-tests/perf-monitor-query (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4d981d0c3bc3f93b7f2392e2029a93af9784e57dcdc6043ac18ff97dac615b16 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @azure-tests/perf-storage-file-datalake (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 468efce3e19be8c294f0928d529c70943981b9cac451ea153487ee1fb90ace49 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-107 Malicious code in @azure-tests/perf-monitor-query (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4d981d0c3bc3f93b7f2392e2029a93af9784e57dcdc6043ac18ff97dac615b16 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-113 Malicious code in @azure-tests/perf-storage-file-datalake (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 468efce3e19be8c294f0928d529c70943981b9cac451ea153487ee1fb90ace49 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in focal-manual-tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1b8267c08beaf2784308f90736258ddb15871543675949db95be58e98520ddd2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3089 Malicious code in focal-manual-tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1b8267c08beaf2784308f90736258ddb15871543675949db95be58e98520ddd2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3767 Malicious code in identity-browser-manual-tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 40e9e7b59f65648a55c2c907954b8521b104671d708910935bc44f0981197a8d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in identity-browser-manual-tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 40e9e7b59f65648a55c2c907954b8521b104671d708910935bc44f0981197a8d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5916 Malicious code in sample-automation-tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d2503d9960518aa42b319b8e3581d032eb3cd48b6cc1ef6e1e4e6b4bf85e61ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sample-automation-tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d2503d9960518aa42b319b8e3581d032eb3cd48b6cc1ef6e1e4e6b4bf85e61ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1179 Malicious code in automated-end-to-end-tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7b0acf6b52deb4d28a2cf909d1fe2cd2ac4947f0e4bd58cab3fe5a5f7498cbad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in connex-tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7295f8eba3551be92116a2102cba3f6febb0b03a2407d1b8e1d3d46459264127 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2159 Malicious code in connex-tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7295f8eba3551be92116a2102cba3f6febb0b03a2407d1b8e1d3d46459264127 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1926 Malicious code in client-sdk-contract-tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8fe4a02bd1d1d6b8dc69d43a33f5f9e0da5592d4cc02571a1e6e51fa53cda52b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in client-sdk-contract-tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8fe4a02bd1d1d6b8dc69d43a33f5f9e0da5592d4cc02571a1e6e51fa53cda52b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Design/Logic Flaw

Discourse is an open-source discussion platform. Prior to version 2.8.4 in the stable branch and version 2.9.0.beta5 in the beta and tests-passed branches, banner topic data is exposed on login-required sites. This issue is patched in version 2.8.4 in the stable branch and version 2.9.0.beta5 in...

CVE-2021-42859

A memory leak issue was discovered in Mini-XML v3.2 that could cause a denial of service. NOTE: testing reports are inconsistent, with some testers seeing the issue in both the 3.2 release and in the October 2021 development code, but others not seeing the issue in the 3.2 release...

GHSA-3VJC-5X79-M9R8 SilverStripe XXE Vulnerability in CSSContentParser

SilverStripe through 4.6.0-rc1 has an XXE Vulnerability in CSSContentParser. A developer utility meant for parsing HTML within unit tests can be vulnerable to XML External Entity XXE attacks. When this developer utility is misused for purposes involving external or user submitted data in custom...