248 matches found
EUVD-2025-112748
Malicious code in html-webpack-plugin-hyperion-vulcan-neptune npm...
Allocation of Resources Without Limits or Throttling
Overview com.liferay:com.liferay.portal.vulcan.impl is a Liferay Portal Vulcan Implementation Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the Headless API endpoint which does not limit the number of returned objects. An attacker can...
Missing Authorization
Overview com.liferay:com.liferay.portal.vulcan.impl is a Liferay Portal Vulcan Implementation Affected versions of this package are vulnerable to Missing Authorization due to improper access control to OpenAPI. An attacker can retrieve sensitive OpenAPI YAML files by sending a specially crafted...
Missing Release of Memory after Effective Lifetime
Overview com.liferay:com.liferay.portal.vulcan.impl is a Liferay Portal Vulcan Implementation Affected versions of this package are vulnerable to Missing Release of Memory after Effective Lifetime via the StructuredContents API endpoint. An attacker can exhaust system memory resources by repeated...
Malicious Package
Overview @huobi-lib/vulcan-js-sdk is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...
Malicious code in @huobi-lib/vulcan-js-sdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 19abe7ab9afcd189bbbd5061add8629d1f576b8dae3944cc7974b7581ffbd570 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-47145 Malicious code in @huobi-lib/vulcan-js-sdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 19abe7ab9afcd189bbbd5061add8629d1f576b8dae3944cc7974b7581ffbd570 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Denial of Service (DoS)
Overview com.liferay:com.liferay.portal.vulcan.impl is a Liferay Portal Vulcan Implementation Affected versions of this package are vulnerable to Denial of Service DoS in the GraphQL process. An attacker can exhaust system resources by executing queries that return a large number of objects...
Denial of Service (DoS)
Overview Affected versions of this package are vulnerable to Denial of Service DoS in the GraphQL process. An attacker can exhaust system resources by executing queries that return a large number of objects. Details Denial of Service DoS describes a family of attacks, all aimed at making a system...
Timing Attack
Overview com.liferay:com.liferay.portal.vulcan.impl is a Liferay Portal Vulcan Implementation Affected versions of this package are vulnerable to Timing Attack via the WorkflowException error messages. An attacker can infer the existence of ERC by measuring differences in response times...
Malicious code in figures-local-vulcan-janus (npm)
The package figures-local-vulcan-janus was found to contain malicious code...
MAL-2025-46654 Malicious code in writable-eslint-config-proxima-vulcan (npm)
The package writable-eslint-config-proxima-vulcan was found to contain malicious code...
Malicious code in futurology-postcss-loader-vulcan-genomics (npm)
The package futurology-postcss-loader-vulcan-genomics was found to contain malicious code...
Malicious code in writable-eslint-config-proxima-vulcan (npm)
The package writable-eslint-config-proxima-vulcan was found to contain malicious code...
MAL-2025-44345 Malicious code in futurology-postcss-loader-vulcan-genomics (npm)
The package futurology-postcss-loader-vulcan-genomics was found to contain malicious code...
Malicious code in tachyon-vulcan-callisto-xml (npm)
The package tachyon-vulcan-callisto-xml was found to contain malicious code...
MAL-2025-44261 Malicious code in figures-local-vulcan-janus (npm)
The package figures-local-vulcan-janus was found to contain malicious code...
MAL-2025-46190 Malicious code in tachyon-vulcan-callisto-xml (npm)
The package tachyon-vulcan-callisto-xml was found to contain malicious code...