MAL-2025-27524 Malicious code in nightwatch-nodejs-run-script-castor (npm)

The package nightwatch-nodejs-run-script-castor was found to contain malicious code...

Malicious code in castor-carpo-glaciology-comet (npm)

The package castor-carpo-glaciology-comet was found to contain malicious code...

MAL-2025-26133 Malicious code in mechatronics-vega-schema-castor (npm)

The package mechatronics-vega-schema-castor was found to contain malicious code...

Malicious code in buffer-castor-meissa-standard (npm)

The package buffer-castor-meissa-standard was found to contain malicious code...

Malicious code in gatsby-enif-remark-castor (npm)

The package gatsby-enif-remark-castor was found to contain malicious code...

Malicious code in dotenv-safe-auriga-cz-conventional-changelog-castor (npm)

The package dotenv-safe-auriga-cz-conventional-changelog-castor was found to contain malicious code...

MAL-2025-25181 Malicious code in less-triton-selenology-castor (npm)

The package less-triton-selenology-castor was found to contain malicious code...

MAL-2025-16285 Malicious code in buffer-castor-meissa-standard (npm)

The package buffer-castor-meissa-standard was found to contain malicious code...

MAL-2025-34666 Malicious code in telesto-castor-koa-slides (npm)

The package telesto-castor-koa-slides was found to contain malicious code...

MAL-2025-16644 Malicious code in castor-server-phoebe-remark (npm)

The package castor-server-phoebe-remark was found to contain malicious code...

OPENSUSE-SU-2024:10439-1 castor-0.9.5-326.4 on GA media

These are all security issues fixed in the castor-0.9.5-326.4 package on the GA media of openSUSE Tumbleweed...

Security Bulletin: TADDM is vulnerable to a denial of service due to vulnerability in Castor Library

Summary Castor Library used by IBM Tivoli Application Dependency Discovery Manager and is vulnerable to CVE-2014-3004 Vulnerability Details CVEID:CVE-2014-3004 DESCRIPTION: Castor Library could allow a remote attacker to obtain sensitive information, caused by an XML External Entity Injection XXE...

SUSE CVE-2014-3004

The default configuration for the Xerces SAX Parser in Castor before 1.3.3 allows context-dependent attackers to conduct XML External Entity XXE attacks via a crafted XML document...

Security Bulletin: XML External Entity Injection vulnerability affect IBM Business Automation Workflow and IBM Business Process Manager (BPM) - CVE-2014-3004

Summary IBM Business Automation Workflow is vulnerable to a XML External Entity Injection attack. Vulnerability Details CVEID:CVE-2014-3004 DESCRIPTION: Castor Library could allow a remote attacker to obtain sensitive information, caused by an XML External Entity Injection XXE error when processi...

org.codehaus.mojo:castor-maven-plugin (1.0) potentially affected by CVE-2014-3004 via castor:castor (0.9.7)

castor:castor MAVEN version 0.9.7 is affected by a known vulnerability. The following packages have a transitive dependency on castor:castor and may be impacted: - org.codehaus.mojo:castor-maven-plugin 1.0 Source cves: CVE-2014-3004 Source advisory: OSV:GHSA-JWWR-FJGH-CV2X...

com.cloudbees.cd.plugins.specs:com.cloudbees.cd.plugins.specs.gradle.plugin (>=1.1.10.11, <=1.1.10.29), gradle.plugin.com.cloudbees.cd.plugins:cbcd-plugin-build (>=1.1.10.11, <=1.1.10.29) +9 more potentially affected by CVE-2014-3004 via castor:castor (0.9.9.0-pre)

castor:castor MAVEN version 0.9.9.0-pre is affected by a known vulnerability. The following packages have a transitive dependency on castor:castor and may be impacted: - com.cloudbees.cd.plugins.specs:com.cloudbees.cd.plugins.specs.gradle.plugin =1.1.10.11, =1.1.10.11, =1.0-rc-1, =1.0, =1.0,...

geronimo:geronimo-axis (>=1.0-m5, <=1.1.1), geronimo:geronimo-axis-builder (>=1.0-m5, <=1.1.1) +73 more potentially affected by CVE-2014-3004 via castor:castor (0.9.5.3)

castor:castor MAVEN version 0.9.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on castor:castor and may be impacted: - geronimo:geronimo-axis =1.0-m5, =1.0-m5, =1.0-m5, =1.0-m5, =1.0-m5, =1.0-m5, =1.0-m5, =1.0-m5, =1.0-m5, =1.0-m5, =1.1.1 -...

Improper Restriction of XML External Entity Reference in Castor

The default configuration for the Xerces SAX Parser in Castor before 1.3.3 allows context-dependent attackers to conduct XML External Entity XXE attacks via a crafted XML document...

GHSA-JWWR-FJGH-CV2X Improper Restriction of XML External Entity Reference in Castor

The default configuration for the Xerces SAX Parser in Castor before 1.3.3 allows context-dependent attackers to conduct XML External Entity XXE attacks via a crafted XML document...

io.github.gferrariuy:axis-rt-databinding-castor (1.4.1.1), io.github.gferrariuy:axis1-maintained (1.4.1.1) potentially affected by CVE-2014-3004 via castor:castor (0.9.4.2)

castor:castor MAVEN version 0.9.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on castor:castor and may be impacted: - io.github.gferrariuy:axis-rt-databinding-castor 1.4.1.1 - io.github.gferrariuy:axis1-maintained 1.4.1.1 Source cves: CVE-2014-3004...