siddheshtea (=1.1.6) potentially affected by unknown CVE via aji-30 (=1.0.0)

aji-30 NPM version =1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on aji-30 and may be impacted: - siddheshtea =1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-152070...

siddheshtea (=1.1.6) potentially affected by unknown CVE via nudela-rahfaeg-naahgsa (=1.0.0)

nudela-rahfaeg-naahgsa NPM version =1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nudela-rahfaeg-naahgsa and may be impacted: - siddheshtea =1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163830...

siddheshtea (=1.1.6) potentially affected by unknown CVE via aji-15 (=1.0.0)

aji-15 NPM version =1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on aji-15 and may be impacted: - siddheshtea =1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-152053...

siddheshtea (=1.1.6) potentially affected by unknown CVE via nokire-nakala42 (=1.0.0)

nokire-nakala42 NPM version =1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nokire-nakala42 and may be impacted: - siddheshtea =1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-162995...

siddheshtea (=1.1.6) potentially affected by unknown CVE via nokire-nakala88 (=1.0.0)

nokire-nakala88 NPM version =1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nokire-nakala88 and may be impacted: - siddheshtea =1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163045...

siddheshtea (=1.1.6) potentially affected by unknown CVE via nul-rae-naha (=1.0.0)

nul-rae-naha NPM version =1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nul-rae-naha and may be impacted: - siddheshtea =1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163880...

siddheshtea (=1.1.6) potentially affected by unknown CVE via nokire-nakala60 (=1.0.0)

nokire-nakala60 NPM version =1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nokire-nakala60 and may be impacted: - siddheshtea =1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163015...

siddheshtea (=1.1.6) potentially affected by unknown CVE via nudela-ggff-gafi (=1.0.0)

nudela-ggff-gafi NPM version =1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nudela-ggff-gafi and may be impacted: - siddheshtea =1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163788...

siddheshtea (=1.1.6) potentially affected by unknown CVE via nudela-aaaf-gaafodfa (=1.0.0)

nudela-aaaf-gaafodfa NPM version =1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nudela-aaaf-gaafodfa and may be impacted: - siddheshtea =1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163701...

siddheshtea (=1.1.6) potentially affected by unknown CVE via nokire-nakala46 (=1.0.0)

nokire-nakala46 NPM version =1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nokire-nakala46 and may be impacted: - siddheshtea =1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-162999...

MAL-2025-138577 Malicious code in ikea-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2d28e0f1a30aac98cbe4b49221df9736b6cbe4d629d85b5b57d50cc4163f72df The OpenSSF Package Analysis project identified 'ikea-test' @ 1.0.0 npm as malicious. It is considered malicious because: - The package executes...

MAL-2025-138578 Malicious code in netflix-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 711ffa8c0ce9379a63de3ef137c0bf569750b0d78159c94ec77e3e25b5354050 The OpenSSF Package Analysis project identified 'netflix-test' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

CVE-2025-11532 Wisly <= 1.0.0 - Insecure Direct Object Reference to Unauthenticated Wishlist Manipulation

The Wisly plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.0.0 due to missing validation on the 'wishlistid' user controlled key. This makes it possible for unauthenticated attackers to remove and add items to other user's wishlists...

CVE-2025-12880 Progress Bar Blocks for Gutenberg <= 1.0.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG

The Progress Bar Blocks for Gutenberg plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-leve...

PT-2025-46249

Name of the Vulnerable Software and Affected Versions Wisly plugin for WordPress versions prior to 1.0.1 Description The Wisly plugin for WordPress is susceptible to an Insecure Direct Object Reference issue in versions up to and including 1.0.0. This is due to a lack of validation on the wishlis...

CVE-2025-64346

archives is a Go library for extracting archives tar, zip, etc.. Version 1.0.0 does not prevent a malicious user to feed a specially crafted archive to the library causing RCE, modification of files or other malignancies in the context of whatever the user is running this library as, through the...

CVE-2025-64346 archives: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

archives is a Go library for extracting archives tar, zip, etc.. Version 1.0.0 does not prevent a malicious user to feed a specially crafted archive to the library causing RCE, modification of files or other malignancies in the context of whatever the user is running this library as, through the...

CVE-2025-64346

The CVE affects the Go library archives (version 1.0.0) used for extracting archives (tar, zip, etc.). Root cause: improper handling/limitation of pathnames allows a specially crafted archive to cause remote code execution or file modifications when processed by the importing program. Impact depe...

CVE-2025-60925

codeshare v1.0.0 was discovered to contain an information leakage vulnerability...

Malicious code in react-paypal-braintree-demo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ebbf8ad1d1a557ec443c0f6ea58587954750259557188b27491cca78c7e9ea7 The package react-paypal-braintree-demo was found to contain malicious code. Source: ossf-package-analysis...