Security
Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.
Advisory catalog
Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.
Collected statements
695766 source statements · aliases may refer to the same vulnerabilityMalicious code in @mikudeveloper/libsignal-node (npm)
osv · GHSA-hf9g-jp6h-4pr2
npm: @mikudeveloper/libsignal-node
Malicious code in @ikanngeming/npm (npm)
osv · GHSA-fr6r-9cvc-942v
npm: @ikanngeming/npm
Malicious code in @mikudeveloper/grace (npm)
osv · GHSA-2gjh-v8x3-xjxj
npm: @mikudeveloper/grace
Malicious code in @mikudeveloper/baileys (npm)
osv · GHSA-2xx9-x9v7-25x2
npm: @mikudeveloper/baileys
Malicious code in @kanaraa/baileys (npm)
osv · GHSA-m8g7-98g3-qmvm
npm: @kanaraa/baileys
Malicious code in @ikanngeming/blubub (npm)
osv · GHSA-4qm4-g99f-98jp
npm: @ikanngeming/blubub
Malicious code in @mivesensei/baileys (npm)
osv · GHSA-f64x-v6q7-3gfp
npm: @mivesensei/baileys
Malicious code in @jojoxyz/condemnedforce-baileys (npm)
osv · GHSA-5j7f-gr36-g6pq
npm: @jojoxyz/condemnedforce-baileys
Malicious code in @ikanngeming/ikannbail (npm)
osv · GHSA-997h-9663-h8gw
npm: @ikanngeming/ikannbail
Malicious code in ikanngeming (npm)
osv · GHSA-j3wm-94vw-jhx7
npm: ikanngeming
Malicious code in @lekzo/baileys (npm)
osv · GHSA-jv7g-wqqq-m6gm
npm: @lekzo/baileys
Malicious code in @lendxntaa/baileys (npm)
osv · GHSA-cqcv-g3vq-g6wr
npm: @lendxntaa/baileys
SPIP < 4.4.18 Unauthenticated Blind SQL Injection via sitemap.xml.html
cve-program ·
Vendor product: SPIP
A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.