Security
Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.
Advisory catalog
Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.
Collected statements
698878 source statements · aliases may refer to the same vulnerabilityMalicious code in wos-library (npm)
osv · GHSA-mfwv-9gcf-2mww
npm: wos-library
Malicious code in @egencia/uitk-global-styles (npm)
osv ·
npm: @egencia/uitk-global-styles
Malicious code in ts-eslint-helper (npm)
osv · GHSA-cr8h-v4vp-m4m8
npm: ts-eslint-helper
Malicious code in speaker_tagging_media_player (npm)
osv ·
npm: speaker_tagging_media_player
Malicious code in tool-registry-scripts (npm)
osv · GHSA-r8mg-hv3j-fc44
npm: tool-registry-scripts
Malicious code in pilgrimage-portal-client (npm)
osv · GHSA-r69p-2jjg-vh25
npm: pilgrimage-portal-client
Malicious code in @egencia/uitk-react-spacing (npm)
osv ·
npm: @egencia/uitk-react-spacing
Malicious code in @client-web-next/ab-landing-form (npm)
osv ·
npm: @client-web-next/ab-landing-form
Malicious code in @client-web-next/analytics (npm)
osv ·
npm: @client-web-next/analytics
Malicious code in @client-web-next/navigation-link (npm)
osv ·
npm: @client-web-next/navigation-link
Malicious code in akamai-sensor (npm)
osv · GHSA-5rgj-m8xx-vvvj
npm: akamai-sensor
Malicious code in @client-web-next/event-bus-listener (npm)
osv ·
npm: @client-web-next/event-bus-listener
Malicious code in @egencia/uitk-react-layout-flex (npm)
osv ·
npm: @egencia/uitk-react-layout-flex
Malicious code in @client-web-next/api-metrics (npm)
osv ·
npm: @client-web-next/api-metrics
Malicious code in matlab-azure-devops-extension (npm)
osv · GHSA-9cfc-3wfm-r8p5
npm: matlab-azure-devops-extension
Malicious code in mercuriusdream-oidc-replay-probe (npm)
osv ·
npm: mercuriusdream-oidc-replay-probe
Malicious code in knowledge-grader (npm)
osv · GHSA-m4g7-2mxw-5m83
npm: knowledge-grader
Malicious code in bcc-design (npm)
osv · GHSA-v36x-48h2-hc4f · SNYK-JS-BCCDESIGN-19003146
npm: bcc-design
Malicious code in frank-apple-utils (npm)
osv · GHSA-xg8f-3qvf-9cfp
npm: frank-apple-utils
Malicious code in glia-functions-tools (npm)
osv · GHSA-62wp-x489-6g6h
npm: glia-functions-tools
Malicious code in fastify-client-bundler (npm)
osv ·
npm: fastify-client-bundler
Malicious code in dynstrg-howto (npm)
osv · GHSA-p2vx-mw75-76fw
npm: dynstrg-howto
Malicious code in dbk-ui-forms (npm)
osv · GHSA-6xhg-r9f8-79h9
npm: dbk-ui-forms
Malicious code in electrode-ota-ui-app (npm)
osv · GHSA-mxx2-5pvc-7hc9
npm: electrode-ota-ui-app
Malicious code in lib-frontsga (npm)
osv · GHSA-gjrm-rjj5-9x2v
npm: lib-frontsga
Malicious code in google-internal-cloud-audit-security-check (npm)
osv · GHSA-cw6m-gmx9-x556
npm: google-internal-cloud-audit-security-check
Malicious code in graphql-js-client-transform (npm)
osv · GHSA-xm59-fwxf-vq6g
npm: graphql-js-client-transform
A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.