# Vulnerabilities published in 2022


- [MAL-2022-104](https://insights.sbomify.com/MAL-2022-104/): Malicious code in @azure-tests/perf-keyvault-certificates (npm) (malicious package)
- [MAL-2022-1039](https://insights.sbomify.com/MAL-2022-1039/): Malicious code in api-discord.js (npm) (malicious package)
- [MAL-2022-1038](https://insights.sbomify.com/MAL-2022-1038/): Malicious code in api-camel (npm) (malicious package)
- [MAL-2022-1037](https://insights.sbomify.com/MAL-2022-1037/): Malicious code in apex-web-tools (npm) (malicious package)
- [MAL-2022-1036](https://insights.sbomify.com/MAL-2022-1036/): Malicious code in apex-metrics (npm) (malicious package)
- [MAL-2022-1035](https://insights.sbomify.com/MAL-2022-1035/): Malicious code in apex-chart-react (npm) (malicious package)
- [MAL-2022-1034](https://insights.sbomify.com/MAL-2022-1034/): Malicious code in apa-root-pzatj (npm) (malicious package)
- [MAL-2022-1033](https://insights.sbomify.com/MAL-2022-1033/): Malicious code in ap-election-adapter (npm) (malicious package)
- [MAL-2022-1032](https://insights.sbomify.com/MAL-2022-1032/): Malicious code in aoxqgmortgkgldq (npm) (malicious package)
- [MAL-2022-1031](https://insights.sbomify.com/MAL-2022-1031/): Malicious code in aoe_playstyle (npm) (malicious package)
- [MAL-2022-1030](https://insights.sbomify.com/MAL-2022-1030/): Malicious code in aocrn (npm) (malicious package)
- [MAL-2022-103](https://insights.sbomify.com/MAL-2022-103/): Malicious code in @azure-tests/perf-identity (npm) (malicious package)
- [MAL-2022-1029](https://insights.sbomify.com/MAL-2022-1029/): Malicious code in anytoken-locked (npm) (malicious package)
- [MAL-2022-1028](https://insights.sbomify.com/MAL-2022-1028/): Malicious code in anyswap-rewards (npm) (malicious package)
- [MAL-2022-1027](https://insights.sbomify.com/MAL-2022-1027/): Malicious code in anypoint-component-site (npm) (malicious package)
- [MAL-2022-1026](https://insights.sbomify.com/MAL-2022-1026/): Malicious code in anyblock-adapter (npm) (malicious package)
- [MAL-2022-1025](https://insights.sbomify.com/MAL-2022-1025/): Malicious code in antisvindel (npm) (malicious package)
- [MAL-2022-1024](https://insights.sbomify.com/MAL-2022-1024/): Malicious code in antiheck (npm) (malicious package)
- [MAL-2022-1023](https://insights.sbomify.com/MAL-2022-1023/): Malicious code in anti-hotlinking (npm) (malicious package)
- [MAL-2022-1022](https://insights.sbomify.com/MAL-2022-1022/): Malicious code in antd-form-design (npm) (malicious package)
- [MAL-2022-1021](https://insights.sbomify.com/MAL-2022-1021/): Malicious code in antcloud1111-node-stack (npm) (malicious package)
- [MAL-2022-1020](https://insights.sbomify.com/MAL-2022-1020/): Malicious code in antcloud111-node-stack (npm) (malicious package)
- [MAL-2022-102](https://insights.sbomify.com/MAL-2022-102/): Malicious code in @azure-tests/perf-event-hubs-track-1 (npm) (malicious package)
- [MAL-2022-1019](https://insights.sbomify.com/MAL-2022-1019/): Malicious code in answers-wix-integration (npm) (malicious package)
- [MAL-2022-1018](https://insights.sbomify.com/MAL-2022-1018/): Malicious code in ansiescapeks (npm) (malicious package)
- [MAL-2022-1017](https://insights.sbomify.com/MAL-2022-1017/): Malicious code in ansfmowzdhuyqpic (npm) (malicious package)
- [MAL-2022-1016](https://insights.sbomify.com/MAL-2022-1016/): Malicious code in anpgvytdohnmusxxexicyoojcrmmzvartwuisqqtnaqolfyddhcfkpnrncyc (npm) (malicious package)
- [MAL-2022-1015](https://insights.sbomify.com/MAL-2022-1015/): Malicious code in anotherpackagefor101 (npm) (malicious package)
- [MAL-2022-1014](https://insights.sbomify.com/MAL-2022-1014/): Malicious code in annoisd (npm) (malicious package)
- [MAL-2022-1013](https://insights.sbomify.com/MAL-2022-1013/): Malicious code in ankseilqrxkymfdt (npm) (malicious package)
- [MAL-2022-1012](https://insights.sbomify.com/MAL-2022-1012/): Malicious code in angularfire-seed (npm) (malicious package)
- [MAL-2022-1011](https://insights.sbomify.com/MAL-2022-1011/): Malicious code in angularanijmate (npm) (malicious package)
- [MAL-2022-1010](https://insights.sbomify.com/MAL-2022-1010/): Malicious code in angular-tz-extensions (npm) (malicious package)
- [MAL-2022-101](https://insights.sbomify.com/MAL-2022-101/): Malicious code in @azure-tests/perf-event-hubs (npm) (malicious package)
- [MAL-2022-1009](https://insights.sbomify.com/MAL-2022-1009/): Malicious code in angular-rs-loading (npm) (malicious package)
- [MAL-2022-1008](https://insights.sbomify.com/MAL-2022-1008/): Malicious code in angular-link-diver (npm) (malicious package)
- [MAL-2022-1007](https://insights.sbomify.com/MAL-2022-1007/): Malicious code in angular-directive-seed (npm) (malicious package)
- [MAL-2022-1006](https://insights.sbomify.com/MAL-2022-1006/): Malicious code in angular-dev-test (npm) (malicious package)
- [MAL-2022-1005](https://insights.sbomify.com/MAL-2022-1005/): Malicious code in angular-codemirror (npm) (malicious package)
- [MAL-2022-1004](https://insights.sbomify.com/MAL-2022-1004/): Malicious code in angular-cloudinary-photo (npm) (malicious package)
- [MAL-2022-1003](https://insights.sbomify.com/MAL-2022-1003/): Malicious code in angular-adaptive-detection (npm) (malicious package)
- [MAL-2022-1002](https://insights.sbomify.com/MAL-2022-1002/): Malicious code in angular-a11y-workshop (npm) (malicious package)
- [MAL-2022-1001](https://insights.sbomify.com/MAL-2022-1001/): Malicious code in angieslist-visitor-app-common (npm) (malicious package)
- [MAL-2022-1000](https://insights.sbomify.com/MAL-2022-1000/): Malicious code in angieslist-styles (npm) (malicious package)
- [MAL-2022-100](https://insights.sbomify.com/MAL-2022-100/): Malicious code in @azure-tests/perf-data-tables (npm) (malicious package)
- [MAL-2022-10](https://insights.sbomify.com/MAL-2022-10/): Malicious code in 0-shadowenv (npm) (malicious package)
- [MAL-2022-1](https://insights.sbomify.com/MAL-2022-1/): malicious crate `rustdecimal` (malicious package)
- [GSD-2022-30190](https://insights.sbomify.com/GSD-2022-30190/): From the original tweet: Interesting maldoc was submitted from Belarus. (not scored)
- [GSD-2022-2274](https://insights.sbomify.com/GSD-2022-2274/): heap buffer overflow in OpenSSL version 3.0.4 (not scored)
- [GSD-2022-1008368](https://insights.sbomify.com/GSD-2022-1008368/): nfs4: Fix kmemleak when allocate slot failed (not scored)
- [GSD-2022-1008367](https://insights.sbomify.com/GSD-2022-1008367/): nfc: s3fwrn5: Fix potential memory leak in s3fwrn5_nci_send() (not scored)
- [GSD-2022-1008366](https://insights.sbomify.com/GSD-2022-1008366/): nfc: nfcmrvl: Fix potential memory leak in nfcmrvl_i2c_nci_send() (not scored)
- [GSD-2022-1008365](https://insights.sbomify.com/GSD-2022-1008365/): net: sched: Fix use after free in red_enqueue() (not scored)
- [GSD-2022-1008364](https://insights.sbomify.com/GSD-2022-1008364/): mISDN: fix possible memory leak in mISDN_register_device() (not scored)
- [GSD-2022-1008363](https://insights.sbomify.com/GSD-2022-1008363/): rose: Fix NULL pointer dereference in rose_send_frame() (not scored)
- [GSD-2022-1008362](https://insights.sbomify.com/GSD-2022-1008362/): btrfs: fix ulist leaks in error paths of qgroup self tests (not scored)
- [GSD-2022-1008361](https://insights.sbomify.com/GSD-2022-1008361/): Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (not scored)
- [GSD-2022-1008360](https://insights.sbomify.com/GSD-2022-1008360/): Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del() (not scored)
- [GSD-2022-1008359](https://insights.sbomify.com/GSD-2022-1008359/): net: mdio: fix undefined behavior in bit shift for __mdiobus_register (not scored)
- [GSD-2022-1008358](https://insights.sbomify.com/GSD-2022-1008358/): HID: hyperv: fix possible memory leak in mousevsc_probe() (not scored)
- [GSD-2022-1008357](https://insights.sbomify.com/GSD-2022-1008357/): net: gso: fix panic on frag_list with mixed head alloc types (not scored)
- [GSD-2022-1008356](https://insights.sbomify.com/GSD-2022-1008356/): capabilities: fix undefined behavior in bit shift for CAP_TO_MASK (not scored)
- [GSD-2022-1008355](https://insights.sbomify.com/GSD-2022-1008355/): ipv6: addrlabel: fix infoleak when sending struct ifaddrlblmsg to network (not scored)
- [GSD-2022-1008354](https://insights.sbomify.com/GSD-2022-1008354/): tipc: fix the msg->req tlv len check in tipc_nl_compat_name_table_dump_header (not scored)
- [GSD-2022-1008353](https://insights.sbomify.com/GSD-2022-1008353/): dmaengine: mv_xor_v2: Fix a resource leak in mv_xor_v2_remove() (not scored)
- [GSD-2022-1008352](https://insights.sbomify.com/GSD-2022-1008352/): net: macvlan: fix memory leaks of macvlan_common_newlink (not scored)
- [GSD-2022-1008351](https://insights.sbomify.com/GSD-2022-1008351/): nilfs2: fix deadlock in nilfs_count_free_blocks() (not scored)
- [GSD-2022-1008350](https://insights.sbomify.com/GSD-2022-1008350/): udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (not scored)
- [GSD-2022-1008349](https://insights.sbomify.com/GSD-2022-1008349/): Bluetooth: L2CAP: Fix attempting to access uninitialized memory (not scored)
- [GSD-2022-1008348](https://insights.sbomify.com/GSD-2022-1008348/): ASoC: core: Fix use-after-free in snd_soc_exit() (not scored)
- [GSD-2022-1008347](https://insights.sbomify.com/GSD-2022-1008347/): ASoC: soc-utils: Remove __exit for snd_soc_util_exit() (not scored)
- [GSD-2022-1008346](https://insights.sbomify.com/GSD-2022-1008346/): ext4: fix warning in 'ext4_da_release_space' (not scored)
- [GSD-2022-1008345](https://insights.sbomify.com/GSD-2022-1008345/): pinctrl: devicetree: fix null pointer dereferencing in pinctrl_dt_to_map (not scored)
- [GSD-2022-1008344](https://insights.sbomify.com/GSD-2022-1008344/): wifi: brcmfmac: Fix potential buffer overflow in brcmf_fweh_event_worker() (not scored)
- [GSD-2022-1008343](https://insights.sbomify.com/GSD-2022-1008343/): mISDN: fix possible memory leak in mISDN_dsp_element_register() (not scored)
- [GSD-2022-1008342](https://insights.sbomify.com/GSD-2022-1008342/): mISDN: fix misuse of put_device() in mISDN_register_device() (not scored)
- [GSD-2022-1008341](https://insights.sbomify.com/GSD-2022-1008341/): xen/pcpu: fix possible memory leak in register_pcpu() (not scored)
- [GSD-2022-1008340](https://insights.sbomify.com/GSD-2022-1008340/): net/x25: Fix skb leak in x25_lapb_receive_frame() (not scored)
- [GSD-2022-1008339](https://insights.sbomify.com/GSD-2022-1008339/): iio: adc: at91_adc: fix possible memory leak in at91_adc_allocate_trigger() (not scored)
- [GSD-2022-1008338](https://insights.sbomify.com/GSD-2022-1008338/): ALSA: hda: fix potential memleak in 'add_widget_node' (not scored)
- [GSD-2022-1008337](https://insights.sbomify.com/GSD-2022-1008337/): iio: trigger: sysfs: fix possible memory leak in iio_sysfs_trig_init() (not scored)
- [GSD-2022-1008336](https://insights.sbomify.com/GSD-2022-1008336/): nilfs2: fix use-after-free bug of ns_writer on remount (not scored)
- [GSD-2022-1008335](https://insights.sbomify.com/GSD-2022-1008335/): misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (not scored)
- [GSD-2022-1008334](https://insights.sbomify.com/GSD-2022-1008334/): tcp: cdg: allow tcp_cdg_release() to be called multiple times (not scored)
- [GSD-2022-1008333](https://insights.sbomify.com/GSD-2022-1008333/): kcm: avoid potential race in kcm_tx_work (not scored)
- [GSD-2022-1008332](https://insights.sbomify.com/GSD-2022-1008332/): ALSA: usb-audio: Drop snd_BUG_ON() from snd_usbmidi_output_open() (not scored)
- [GSD-2022-1008331](https://insights.sbomify.com/GSD-2022-1008331/): dm ioctl: fix misbehavior if list_versions races with module loading (not scored)
- [GSD-2022-1008330](https://insights.sbomify.com/GSD-2022-1008330/): 9p: trans_fd/p9_conn_cancel: drop client lock earlier (not scored)
- [GSD-2022-1008329](https://insights.sbomify.com/GSD-2022-1008329/): gfs2: Check sb_bsize_shift after reading superblock (not scored)
- [GSD-2022-1008328](https://insights.sbomify.com/GSD-2022-1008328/): 9p/trans_fd: always use O_NONBLOCK read/write (not scored)
- [GSD-2022-1008327](https://insights.sbomify.com/GSD-2022-1008327/): ntfs: fix use-after-free in ntfs_attr_find() (not scored)
- [GSD-2022-1008326](https://insights.sbomify.com/GSD-2022-1008326/): ntfs: fix out-of-bounds read in ntfs_attr_find() (not scored)
- [GSD-2022-1008325](https://insights.sbomify.com/GSD-2022-1008325/): ntfs: check overflow when iterating ATTR_RECORDs (not scored)
- [GSD-2022-1008324](https://insights.sbomify.com/GSD-2022-1008324/): nfs4: Fix kmemleak when allocate slot failed (not scored)
- [GSD-2022-1008323](https://insights.sbomify.com/GSD-2022-1008323/): net: dsa: Fix possible memory leaks in dsa_loop_init() (not scored)
- [GSD-2022-1008322](https://insights.sbomify.com/GSD-2022-1008322/): nfc: s3fwrn5: Fix potential memory leak in s3fwrn5_nci_send() (not scored)
- [GSD-2022-1008321](https://insights.sbomify.com/GSD-2022-1008321/): nfc: nfcmrvl: Fix potential memory leak in nfcmrvl_i2c_nci_send() (not scored)
- [GSD-2022-1008320](https://insights.sbomify.com/GSD-2022-1008320/): net: sched: Fix use after free in red_enqueue() (not scored)
- [GSD-2022-1008319](https://insights.sbomify.com/GSD-2022-1008319/): mISDN: fix possible memory leak in mISDN_register_device() (not scored)
- [GSD-2022-1008318](https://insights.sbomify.com/GSD-2022-1008318/): rose: Fix NULL pointer dereference in rose_send_frame() (not scored)

---
From sbomify Insights: https://insights.sbomify.com/years/2022/page/83/