CVE-2025-7777 Mirror-registry: host header injection in mirror-registry

The mirror-registry doesn't properly sanitize the host header HTTP header in HTTP request received, allowing an attacker to perform malicious redirects to attacker-controlled domains or phishing campaigns...

PT-2025-34038 · Unknown · Mirror-Registry

Name of the Vulnerable Software and Affected Versions: mirror-registry affected versions not specified Description: The mirror-registry does not properly sanitize the host header HTTP header in received HTTP requests, which allows an attacker to perform malicious redirects to attacker-controlled...

MAL-2025-7777 Malicious code in @diotobtea/labore-odio (npm)

The package @diotobtea/labore-odio was found to contain malicious code...