@luxos/share-panel (>=1.0.0, <=1.0.3), @types/cordova-plugin-x-socialsharing (>=5.4.5, <=5.4.8) +5 more potentially affected by CVE-2025-65835 via cordova-plugin-x-socialsharing (>=5.6.8, <=6.0.4)

cordova-plugin-x-socialsharing NPM version =5.6.8, =1.0.0, =5.4.5, =0.0.1, =1.0.0 - mobile-asset-manager 1.0.0 - radoo-odc-app 0.0.1 Source cves: CVE-2025-65835 Source advisory: SNYK:JS-CORDOVAPLUGINXSOCIALSHARING-14426472...

CVE-2025-65835

The Cordova plugin cordova-plugin-x-socialsharing SocialSharing-PhoneGap-Plugin for Android 6.0.4, registers an exported broadcast receiver nl.xservices.plugins.ShareChooserPendingIntent with an android.intent.action.SEND intent filter. The onReceive implementation accesses...