4 matches found
Malicious code in creditgauge (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0bd064afe94f426f1124703c1c1f7ac52ee1ad1df728c33ce7cbe4328bae876 The package has no functional library code: package.json declares main=index.js but no index.js is shipped; the tarball contains only package.json an...
Unable to connect to the server. Contact ... with the following error (no error text available)
1: Via Third party proxy, Workspace report error when launching ICA file "Unable to connect to the server. Contact your systemadministator with the following error no error text available". 2: By PassThird party proxy,Workspace launching ICA file is successful...
GHSA-83RX-C8CR-6J8Q Insecure Default Configuration in tesseract.js
Versions of tesseract.js prior to 1.0.19 default to using a third-party proxy. Requests may be proxied through crossorigin.me which clearly states is not suitable for production use. This may lead to instability and privacy violations. Recommendation Upgrade to version 1.0.19 or later...
PT-2019-20022
Name of the Vulnerable Software and Affected Versions tesseract.js versions prior to 1.0.19 Description The issue concerns the default use of a third-party proxy in versions of tesseract.js prior to 1.0.19. Requests are proxied through crossorigin.me, which is explicitly stated as not suitable fo...