9928 matches found
EUVD-2025-176871
Malicious code in quantum-norma-canopus-dotenv-parse-variables npm...
PT-2025-46904
Name of the Vulnerable Software and Affected Versions Socket Firewall versions prior to 0.15.5 Description Socket Firewall is an HTTP/HTTPS proxy server designed to enforce security policies by blocking dangerous packages. Versions of Socket Firewall prior to 0.15.5 are susceptible to arbitrary...
CVE-2025-64407
Apache OpenOffice documents can contain links. A missing Authorization vulnerability in Apache OpenOffice allowed an attacker to craft a document that would cause external links to be loaded without prompt. Such links could also be used to transmit system information, such as environment variable...
CVE-2025-64407 Apache OpenOffice: URL fetching can be used to exfiltrate arbitrary INI file values and environment variables
Apache OpenOffice documents can contain links. A missing Authorization vulnerability in Apache OpenOffice allowed an attacker to craft a document that would cause external links to be loaded without prompt. Such links could also be used to transmit system information, such as environment variable...
CVE-2025-64407 Apache OpenOffice: URL fetching can be used to exfiltrate arbitrary INI file values and environment variables
Apache OpenOffice documents can contain links. A missing Authorization vulnerability in Apache OpenOffice allowed an attacker to craft a document that would cause external links to be loaded without prompt. Such links could also be used to transmit system information, such as environment variable...
CVE-2025-64407
Technical details for CVE-2025-64407 are not publicly provided in the connected documents. Available sources discuss related vulnerabilities (CVE-2024-12425/12426) and Apache OpenOffice issues, but do not specify this CVE’s affected products, root cause, or fixes.
EUVD-2025-114373
Malicious code in dotenv-parse-variables-rehype-webpack-dependencies npm...
EUVD-2025-114383
Malicious code in dotenv-parse-variables-module-oauth-magellan npm...
EUVD-2025-124219
Malicious code in nuxtjs-dotenv-parse-variables-release-it-nova npm...
Malicious code in node-sass-eslint-plugin-solis-dotenv-parse-variables (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5aed2df30501f45d7be301a0e5be1666e00b4b3342c466d56d145e396b7a877d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-120817
Malicious code in venus-figures-configstore-dotenv-parse-variables npm...
EUVD-2025-120445
Malicious code in winston-changelog-dotenv-parse-variables-parcel npm...
EUVD-2025-116595
Malicious code in apollo-elara-dotenv-parse-variables-charon npm...
EUVD-2025-121616
Malicious code in stop-zenith-auriga-dotenv-parse-variables npm...
EUVD-2025-112977
Malicious code in halley-dotenv-parse-variables-hermes-promise npm...
EUVD-2025-123326
Malicious code in procyon-hyperion-dotenv-parse-variables-blaze npm...
EUVD-2025-114396
Malicious code in dotenv-parse-variables-convict-fusion-vuepress npm...
EUVD-2025-114397
Malicious code in dotenv-parse-variables-castor-impulse-webdriver-manager npm...
Malicious code in venus-figures-configstore-dotenv-parse-variables (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0543c785df22d8f67917ca6aa28df150dc9ee6ece52da178cf311fedb4a0b36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...