29 matches found
EUVD-2025-116984
Malicious code in worthy-jade-crow npm...
EUVD-2025-100195
Malicious code in worthycanidaez3n npm...
EUVD-2025-93951
Malicious code in worthyrhinocerosz3n npm...
EUVD-2025-75196
Malicious code in worthyaardwolf-appteadev npm...
EUVD-2025-72867
Malicious code in worthyaardvarkz3n npm...
Malicious code in worthy_aardvark_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4113da2d5afd4b6a9f3cf64d1e8ea78a4bb531e86f988f88f39d2c149f08f968 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-51003
Malicious code in worthy-aqua-mollusk npm...
EUVD-2025-51002
Malicious code in worthy-maroon-mackerel npm...
EUVD-2025-48998
Malicious code in worthytigerz3n npm...
EUVD-2025-49000
Malicious code in worthyfowlz3n npm...
EUVD-2025-44427
Malicious code in worthyflyz3n npm...
EUVD-2023-28473
Malicious code in bioql PyPI...
CVE-2023-24417
Cross-Site Request Forgery CSRF vulnerability in tiggersWelt.Net Worthy plugin = 1.6.5-6497609 versions...
GHSA-R9PX-M959-CXF4 go-git clients vulnerable to DoS via maliciously crafted Git server replies
Impact A denial of service DoS vulnerability was discovered in go-git versions prior to v5.13. This vulnerability allows an attacker to perform denial of service attacks by providing specially crafted responses from a Git server which triggers resource exhaustion in go-git clients. This is a go-g...
CVE-2023-49568
A denial of service DoS vulnerability was found in the go library go-git. This issue may allow an attacker to perform denial of service attacks by providing specially crafted responses from a Git server, which can trigger resource exhaustion in go-git clients. Mitigation In cases where a bump to...
Maliciously crafted Git server replies can lead to path traversal and RCE on go-git clients
Impact A path traversal vulnerability was discovered in go-git versions prior to v5.11. This vulnerability allows an attacker to create and amend files across the filesystem. In the worse case scenario, remote code execution could be achieved. Applications are only affected if they are using the...
GHSA-MW99-9CHC-XW7R Maliciously crafted Git server replies can cause DoS on go-git clients
Impact A denial of service DoS vulnerability was discovered in go-git versions prior to v5.11. This vulnerability allows an attacker to perform denial of service attacks by providing specially crafted responses from a Git server which triggers resource exhaustion in go-git clients. Applications...
CVE-2023-24417
Cross-Site Request Forgery CSRF vulnerability in tiggersWelt.Net Worthy plugin = 1.6.5-6497609 versions...
CVE-2023-24417
Cross-Site Request Forgery CSRF vulnerability in tiggersWelt.Net Worthy plugin = 1.6.5-6497609 versions...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability in tiggersWelt.Net Worthy plugin = 1.6.5-6497609 versions...