Snyk Security Database

@mmm-otrade/transaction is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship.

apache-airflow-providers-amazon is a Provider for Apache Airflow. Implements apache-airflow-providers-amazon package

Affected versions of this package are vulnerable to Origin Validation Error in the SAML authentication process due to improper verification of the origin provided by the client. An attacker can gain unauthorized access to different instances by reusing a SAML response from another instance.

org.apache.zookeeper:zookeeper is a centralized service for maintaining configuration information, naming, providing distributed synchronization, and providing group services.

Affected versions of this package are vulnerable to Insertion of Sensitive Information into Log File via logging ZK configuration properties in the ZKConfig class. An attacker can obtain sensitive information and secrets by accessing client log files where configuration values are written at the INFO logging level.