Malicious code in sample-automation-tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d2503d9960518aa42b319b8e3581d032eb3cd48b6cc1ef6e1e4e6b4bf85e61ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1179 Malicious code in automated-end-to-end-tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7b0acf6b52deb4d28a2cf909d1fe2cd2ac4947f0e4bd58cab3fe5a5f7498cbad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in connex-tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7295f8eba3551be92116a2102cba3f6febb0b03a2407d1b8e1d3d46459264127 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2159 Malicious code in connex-tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7295f8eba3551be92116a2102cba3f6febb0b03a2407d1b8e1d3d46459264127 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1926 Malicious code in client-sdk-contract-tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8fe4a02bd1d1d6b8dc69d43a33f5f9e0da5592d4cc02571a1e6e51fa53cda52b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in client-sdk-contract-tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8fe4a02bd1d1d6b8dc69d43a33f5f9e0da5592d4cc02571a1e6e51fa53cda52b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Design/Logic Flaw

Discourse is an open-source discussion platform. Prior to version 2.8.4 in the stable branch and version 2.9.0.beta5 in the beta and tests-passed branches, banner topic data is exposed on login-required sites. This issue is patched in version 2.8.4 in the stable branch and version 2.9.0.beta5 in...

CVE-2021-42859

A memory leak issue was discovered in Mini-XML v3.2 that could cause a denial of service. NOTE: testing reports are inconsistent, with some testers seeing the issue in both the 3.2 release and in the October 2021 development code, but others not seeing the issue in the 3.2 release...

org.jenkins-ci.main:jenkins-test-harness (1.587), org.jenkins-ci.main:jenkins-war (1.587) +2 more potentially affected by CVE-2019-10402 via org.jenkins-ci.main:jenkins-core (1.587)

org.jenkins-ci.main:jenkins-core MAVEN version 1.587 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.587 - org.jenkins-ci.main:jenkins-war 1.587 -...

org.jenkins-ci.main:jenkins-test-harness (1.587), org.jenkins-ci.main:jenkins-war (1.587) +2 more potentially affected by CVE-2019-10401 via org.jenkins-ci.main:jenkins-core (1.587)

org.jenkins-ci.main:jenkins-core MAVEN version 1.587 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.587 - org.jenkins-ci.main:jenkins-war 1.587 -...

org.jenkins-ci.main:jenkins-test-harness (1.587), org.jenkins-ci.main:jenkins-war (1.587) +2 more potentially affected by CVE-2019-10405 via org.jenkins-ci.main:jenkins-core (1.587)

org.jenkins-ci.main:jenkins-core MAVEN version 1.587 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.587 - org.jenkins-ci.main:jenkins-war 1.587 -...

org.jenkins-ci.main:jenkins-test-harness (1.587), org.jenkins-ci.main:jenkins-war (1.587) +2 more potentially affected by CVE-2019-10404 via org.jenkins-ci.main:jenkins-core (1.587)

org.jenkins-ci.main:jenkins-core MAVEN version 1.587 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.587 - org.jenkins-ci.main:jenkins-war 1.587 -...

org.jenkins-ci.main:jenkins-test-harness (1.587), org.jenkins-ci.main:jenkins-war (1.587) +2 more potentially affected by CVE-2021-21687 via org.jenkins-ci.main:jenkins-core (1.587)

org.jenkins-ci.main:jenkins-core MAVEN version 1.587 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.587 - org.jenkins-ci.main:jenkins-war 1.587 -...

org.jenkins-ci.main:jenkins-test-harness (1.587), org.jenkins-ci.main:jenkins-war (1.587) +2 more potentially affected by CVE-2021-21692 via org.jenkins-ci.main:jenkins-core (1.587)

org.jenkins-ci.main:jenkins-core MAVEN version 1.587 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.587 - org.jenkins-ci.main:jenkins-war 1.587 -...

org.jenkins-ci.main:jenkins-test-harness (1.587), org.jenkins-ci.main:jenkins-war (1.587) +2 more potentially affected by CVE-2021-21691 via org.jenkins-ci.main:jenkins-core (1.587)

org.jenkins-ci.main:jenkins-core MAVEN version 1.587 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.587 - org.jenkins-ci.main:jenkins-war 1.587 -...

org.jenkins-ci.main:jenkins-test-harness (1.587), org.jenkins-ci.main:jenkins-war (1.587) +2 more potentially affected by CVE-2021-21694 via org.jenkins-ci.main:jenkins-core (1.587)

org.jenkins-ci.main:jenkins-core MAVEN version 1.587 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.587 - org.jenkins-ci.main:jenkins-war 1.587 -...

org.jenkins-ci.main:jenkins-test-harness (1.587), org.jenkins-ci.main:jenkins-war (1.587) +2 more potentially affected by CVE-2021-21688 via org.jenkins-ci.main:jenkins-core (1.587)

org.jenkins-ci.main:jenkins-core MAVEN version 1.587 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.587 - org.jenkins-ci.main:jenkins-war 1.587 -...

org.jenkins-ci.main:jenkins-test-harness (1.587), org.jenkins-ci.main:jenkins-war (1.587) +2 more potentially affected by CVE-2021-21693 via org.jenkins-ci.main:jenkins-core (1.587)

org.jenkins-ci.main:jenkins-core MAVEN version 1.587 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.587 - org.jenkins-ci.main:jenkins-war 1.587 -...

org.jenkins-ci.main:jenkins-test-harness (1.587), org.jenkins-ci.main:jenkins-war (1.587) +2 more potentially affected by CVE-2021-21696 via org.jenkins-ci.main:jenkins-core (1.587)

org.jenkins-ci.main:jenkins-core MAVEN version 1.587 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.587 - org.jenkins-ci.main:jenkins-war 1.587 -...

org.jenkins-ci.main:jenkins-test-harness (1.587), org.jenkins-ci.main:jenkins-war (1.587) +2 more potentially affected by CVE-2021-21682 via org.jenkins-ci.main:jenkins-core (1.587)

org.jenkins-ci.main:jenkins-core MAVEN version 1.587 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.587 - org.jenkins-ci.main:jenkins-war 1.587 -...