4 matches found
PT-2025-17465
Name of the Vulnerable Software and Affected Versions Adept versions prior to commit a1a41b7 Description The issue concerns the exposure of the GITHUB TOKEN in the Adept language workflow. Prior to commit a1a41b7, the remoteBuild.yml workflow file uses actions/upload-artifact@v4 to upload the...
MAL-2024-12058 Malicious code in upload-artifact (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9241c352df8001e364da964a6123f4cefa259415eefa70930aef98fe673a3202 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in upload-artifact (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9241c352df8001e364da964a6123f4cefa259415eefa70930aef98fe673a3202 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2018-5432
The TIBCO Administrator server component of of TIBCO Software Inc.'s TIBCO Administrator - Enterprise Edition, and TIBCO Administrator - Enterprise Edition for z/Linux contains multiple vulnerabilities wherein a malicious user could theoretically perform cross-site scripting XSS attacks by way of...