EUVD-2025-15407

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

lockfile-lint-api has a vulnerability related to incorrect behavior order identified in EUVD-2025-15407

Reporter	Title	Published	Views	Family All 14
Circl	CVE-2025-4759	16 May 202505:34	–	circl
CNNVD	lockfile linting 安全漏洞	16 May 202500:00	–	cnnvd
CVE	CVE-2025-4759	16 May 202505:00	–	cve
Cvelist	CVE-2025-4759	16 May 202505:00	–	cvelist
Github Security Blog	lockfile-lint-api Vulnerable to Incorrect Behavior Order	16 May 202506:30	–	github
NVD	CVE-2025-4759	16 May 202505:15	–	nvd
OSV	GHSA-7CFR-5CJF-32P4 lockfile-lint-api Vulnerable to Incorrect Behavior Order	16 May 202506:30	–	osv
Positive Technologies	PT-2025-21607 · Npm · Lockfile-Lint-Api	16 May 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-4759	18 May 202505:12	–	redhatcve
Snyk	Incorrect Behavior Order: Early Validation	13 Apr 202518:04	–	snyk

[
  {
    "enisaIdVendor": [
      {
        "id": "ae3518f3-7362-3c4e-8f20-30e85cd253c0",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "ffbd41d4-00d5-3040-95be-1473003651d8",
        "product": {
          "name": "lockfile-lint-api"
        },
        "product_version": "0 <5.9.2"
      }
    ]
  }
]

Source	Link
security	www.security.snyk.io/vuln/SNYK-JS-LOCKFILELINTAPI-10169587
gist	www.gist.github.com/Xavier59/881aef04940970dc3e738dcbff64151f
github	www.github.com/lirantal/lockfile-lint/blob/89b5cad028df4d77bab2b73ac93bc61e392668ab/packages/lockfile-lint-api/src/validators/ValidatePackageNames.js%23L51-L63
github	www.github.com/lirantal/lockfile-lint/pull/204
github	www.github.com/lirantal/lockfile-lint/commit/9e5305bd3e4f0c6acc0d23ec43eac2bd5303b4ca
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-4759
github	www.github.com/lirantal/lockfile-lint/blob/89b5cad028df4d77bab2b73ac93bc61e392668ab/packages/lockfile-lint-api/src/validators/ValidatePackageNames.js

03 Oct 2025 20:07Current

6.3Medium risk

Vulners AI Score6.3

CVSS 46.9

CVSS 3.15.3 - 8.3

EPSS0.00175

SSVC

lockfile-lint-api incorrect behavior order vulnerability euvd-2025-15407