Excellent
Introducing the all new lifestyle brand — Eliivate. // Our goal is to create products that push you to new limits. The time is now. All products are hand-made & packaged in Virginia.
Strong
For almost four decades, Patanjali Foods has championed India’s wellness revolution. Founded in 1986, we began with a simple mission: making swadeshi products, affordable and quality-driven for every household. Today, we are a leading FMCG force, offering a wide range of household essentials. From nourishing foods to trusted home and personal care solutions we meet the highest standards of purity and reliability. Together, we’re building a healthier tomorrow. Rooted in Indian heritage, we instill pride in every Indian home.
Security & Compliance Standards Overview
No incidents recorded for Eliivate in 2025.
No incidents recorded for Patanjali Foods in 2025.
Eliivate cyber incidents detection timeline including parent company and subsidiaries
Patanjali Foods cyber incidents detection timeline including parent company and subsidiaries
Last 3 Security & Risk Events by Company
PyVista provides 3D plotting and mesh analysis through an interface for the Visualization Toolkit (VTK). Version 0.46.3 of the PyVista Project is vulnerable to remote code execution via dependency confusion. Two pieces of code use`--extra-index-url`. But when `--extra-index-url` is used, pip always checks for the PyPI index first, and then the external index. One package listed in the code is not published in PyPI. If an attacker publishes a package with higher version in PyPI, the malicious code from the attacker controlled package may be pulled, leading to remote code execution and a supply chain attack. As of time of publication, a patched version is unavailable.
KUNO CMS is a fully deployable full-stack blog application. In versions prior to 1.3.15, an SSRF (Server-Side Request Forgery) vulnerability exists in the Media module of the Kuno CMS administrative panel. A logged-in administrator can upload a specially crafted SVG file containing an external image reference, causing the server to initiate an outgoing connection to an arbitrary external URL. This can lead to information disclosure or internal network probing. Version 1.3.15 contains a fix for the issue.
The Profile widget in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.Q4.5, 2023.Q3.1 through 2023.Q3.8, 7.4 GA through update 92, and older unsupported versions uses a user’s name in the “Content-Disposition” header, which allows remote authenticated users to change the file extension when a vCard file is downloaded.
The YoSmart YoLink API through 2025-10-02 uses an endpoint URL that is derived from a device's MAC address along with an MD5 hash of non-secret information, such as a key that begins with cf50.
The YoSmart YoLink application through 2025-10-02 has session tokens with unexpectedly long lifetimes.
