MariaDB 安全漏洞

MariaDB is a free and open source database management system from the MariaDB Foundation and a forked version of MySQL with the Maria storage engine. A security vulnerability exists in MariaDB that stems from a crash in Itemdirectviewref::derivedfieldtransformerforwhere. The following versions ar...

CVE-2023-52970

CVE-2023-52970 affects MariaDB Server runtimes and causes crashes in Item_direct_view_ref::derived_field_transformer_for_where across multiple MariaDB releases (notably 10.4–11.4). The issue is described as a crash condition in the server when evaluating derived fields in WHERE clauses. Public ad...

CVE-2023-52970

MariaDB Server 10.4 through 10.5., 10.6 through 10.6., 10.7 through 10.11., 11.0 through 11.0., and 11.1 through 11.4. crashes in Itemdirectviewref::derivedfieldtransformerforwhere...

Malicious code in nft-transfer-transforme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a09653a1d426cf6f90d650d5969507f62361acd5a0358bc0fa0dc59045a160cf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nft-transfer-transformer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 90b61c51743bbb7e45afbab35984b72d25a2743ce9b95ce35a49bf6637a29bca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1154 Malicious code in nft-transfer-transforme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a09653a1d426cf6f90d650d5969507f62361acd5a0358bc0fa0dc59045a160cf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1155 Malicious code in nft-transfer-transformer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 90b61c51743bbb7e45afbab35984b72d25a2743ce9b95ce35a49bf6637a29bca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in atlaspack-transformer-string (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 57a42ac4c0c8a380053e88934749771a5bf26c0619840538587e7934116cd8c1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-162 Malicious code in atlaspack-transformer-string (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 57a42ac4c0c8a380053e88934749771a5bf26c0619840538587e7934116cd8c1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Security Bulletin: IBM Cognos Transformer is affected by vulnerabilities in IBM® Java™ and Bouncy Castle Crypto Package For Java

Summary There are vulnerabilities in IBM® Java™ and Bouncy Castle Crypto Package For Java consumed by IBM Cognos Transformer. For more information about the vulnerability impact, refer to the table in the "Related Information" section. This Security Bulletin relates only to third-party components...

Malicious code in otlp-transformer (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-9749 Malicious code in otlp-transformer (npm)

--- -= Per source details. Do not edit below this line.=-...

Security Bulletin: IBM Cognos Transformer is affected by vulnerabilities in IBM® Java™

Summary Vulnerabilities in IBM® Java™ Version 8 that is consumed by IBM Cognos Transformer have been addressed. Please refer to the table in the Related Information section for vulnerability impact. Vulnerability Details CVEID:CVE-2024-20952 DESCRIPTION: An unspecified vulnerability in Java SE...

Microsoft Azure GPT ALE palantirdemoacr Uncontrolled Search Path Element Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Azure GPT ALE. Authentication is not required to exploit this vulnerability. The specific flaw exists within the installation of Generative Pre-trained Transformer Active Learning Engine GP...

CVE-2024-41950

Haystack is an end-to-end LLM framework that allows you to build applications powered by LLMs, Transformer models, vector search and more. Haystack clients that let their users create and run Pipelines from scratch are vulnerable to remote code executions. Certain Components in Haystack use Jinja...

Malicious code in babel-transformer (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-1802 Malicious code in babel-transformer (npm)

--- -= Per source details. Do not edit below this line.=-...

Security Bulletin: IBM Cognos Transformer is affected by security vulnerabilities

Summary There are vulnerabilities in Apache Xalan, Apache Commons Codec, IBM® Java™ Version 8, and OpenSSL that are consumed by IBM Cognos Transformer. These have been addressed by upgrading or removing the vulnerable libraries. Please refer to the table in the Related Information section for...

Prototype Pollution

deobfuscator is vulnerable to Prototype Pollution. This vulnerability allows an attacker to modify the prototype of the Object constructor via the LiteralMap transformer, which could then be used to execute arbitrary code on the victim's system...

Synchrony deobfuscator prototype pollution vulnerability leading to arbitrary code execution

Impact A proto pollution vulnerability exists in synchrony versions before v2.4.4. Successful exploitation could lead to arbitrary code execution. Summary A proto pollution vulnerability exists in the LiteralMap transformer allowing crafted input to modify properties in the Object prototype. When...