postgraas-server vulnerable to SQL injection

A vulnerability, which was classified as critical, was found in Blue Yonder postgraasserver up to 2.0.0b2. Affected is the function createpgconnection/createpostgresdb of the file postgraasserver/backends/postgrescluster/postgresclusterdriver.py of the component PostgreSQL Backend Handler. The...

PT-2026-53539

A vulnerability, which was classified as critical, was found in Blue Yonder postgraas server up to 2.0.0b2. Affected is the function create pg connection/create postgres db of the file postgraas server/backends/postgres cluster/postgres cluster driver.py of the component PostgreSQL Backend Handle...

Malicious code in yonder-less-loader-ini-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64d24be310a09fbc0c9ea69c806f48c32bc74d179f2b3b70aedfed17bb573b41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179944

Malicious code in bulma-yonder-acamar-ichnology npm...

EUVD-2025-175438

Malicious code in yonder-mineralogy-ablation-achernar npm...

EUVD-2025-175969

Malicious code in tethys-primatology-selenium-yonder npm...

EUVD-2025-178441

Malicious code in impulse-blaze-yonder-eleventy npm...

EUVD-2025-178998

Malicious code in eventhoriz-yonder-heliophysics-spawn npm...

EUVD-2025-176262

Malicious code in spectron-ursa-yonder-command npm...

MAL-2025-190441 Malicious code in yonder-sedna-innercore-slidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 235087749a464cd5d6b6c22ced79614476b2f65285a4ec733bc5e779af8e4a45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-180255

Malicious code in async-yonder-hadron-meteor npm...

EUVD-2025-180254

Malicious code in async-yonder-void-gravity npm...

EUVD-2025-175435

Malicious code in yonder-sedna-innercore-slidev npm...

EUVD-2025-175434

Malicious code in yonder-webdriverio-lynx-blackhole npm...

EUVD-2025-175433

Malicious code in yonder-xerxes-xanthus-halley npm...

EUVD-2025-175437

Malicious code in yonder-rollup-dynamo-build npm...

EUVD-2025-175440

Malicious code in yonder-fermion-delphinus-transform npm...

EUVD-2025-179517

Malicious code in cosmos-yonder-grunt-nashira npm...

EUVD-2025-177435

Malicious code in ophiuchus-yonder-magellan-remark npm...

MAL-2025-186365 Malicious code in cosmos-yonder-grunt-nashira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05ec61cd9ccaae23473fa62ba89bdc0cd77a1cf4c2ad714655057db11196e10b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...