Aikido Threat Intelligence

@cap-js/hana is vulnerable to Denial of Service (DoS)

Upgrade the @cap-js/hana library to the patch version.

strapi-plugin-comments is vulnerable to Cross-site Scripting (XSS)

Upgrade the strapi-plugin-comments library to the patch version.

github.com/external-secrets/external-secrets is vulnerable to Generation of Error Message Containing Sensitive Information

Upgrade the github.com/external-secrets/external-secrets library to a patch version.

taskiq-redis is vulnerable to Denial of Service (DoS)

Upgrade the taskiq-redis library to the patch version.

openhands-sdk is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor

Upgrade the openhands-sdk library to the patch version.

directorytree/imapengine is vulnerable to Command injection

Upgrade the directorytree/imapengine library to the patch version.

eclipse-threadx.threadx is vulnerable to Incorrect Check of Function Return Value

Upgrade the eclipse-threadx.threadx library to the patch version.

@enspirit/elo is vulnerable to Code Injection

Upgrade the @enspirit/elo library to the patch version.

sigs.k8s.io/azurefile-csi-driver is vulnerable to Dependency on Vulnerable Third-Party Component

Upgrade the sigs.k8s.io/azurefile-csi-driver library to a patch version.

@nx/workspace is vulnerable to Command Injection

Upgrade the @nx/workspace library to the patch version.