Malicious code in vortex-logger (npm)

The package vortex-logger was found to contain malicious code...

MAL-2025-42026 Malicious code in morgan-logger (npm)

The package morgan-logger was found to contain malicious code...

MAL-2025-42019 Malicious code in logger-cookie (npm)

The package logger-cookie was found to contain malicious code...

MAL-2025-42038 Malicious code in node-logger-sdk (npm)

The package node-logger-sdk was found to contain malicious code...

MAL-2025-42018 Malicious code in jsons-logger (npm)

The package jsons-logger was found to contain malicious code...

MAL-2025-42021 Malicious code in lovable-logger (npm)

The package lovable-logger was found to contain malicious code...

MAL-2025-42007 Malicious code in husky-logger (npm)

The package husky-logger was found to contain malicious code...

Malicious code in sessions-logger (npm)

The package sessions-logger was found to contain malicious code...

MAL-2025-42083 Malicious code in sessions-logger (npm)

The package sessions-logger was found to contain malicious code...

Malicious code in logger-extjs (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-41582 Malicious code in logger-extjs (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in func-logger (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-41568 Malicious code in func-logger (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in btrez-logger (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-41539 Malicious code in btrez-logger (npm)

--- -= Per source details. Do not edit below this line.=-...

Apache Log4cxx Cross-Site Scripting Vulnerability

Apache Log4cxx is the United States Apache Apache Foundation of a C + + logging framework patterned on Apache log4j . A cross-site scripting vulnerability exists in Apache Log4cxx versions prior to 1.5.0, which stems from HTMLLayout not properly escaping logger names, and can be exploited by an...

SUSE CVE-2025-54812

Improper Output Neutralization for Logs vulnerability in Apache Log4cxx. When using HTMLLayout, logger names are not properly escaped when writing out to the HTML file. If untrusted data is used to retrieve the name of a logger, an attacker could theoretically inject HTML or Javascript in order t...

CVE-2025-54812

A flaw was found in log4cxx. When using HTMLLayout, logger names are not properly escaped. This vulnerability allows an attacker to provide untrusted data as a logger name to inject arbitrary HTML content into log output files. This issue can lead to cross-site scripting vulnerabilities if the HT...

Improper Output Neutralization for Logs

Overview Affected versions of this package are vulnerable to Improper Output Neutralization for Logs in the HTMLLayout class. An attacker can execute arbitrary HTML or JavaScript code by injecting malicious content into the logger name, which is then written to the HTML log file and subsequently...

CVE-2025-54812

Improper Output Neutralization for Logs vulnerability in Apache Log4cxx. When using HTMLLayout, logger names are not properly escaped when writing out to the HTML file. If untrusted data is used to retrieve the name of a logger, an attacker could theoretically inject HTML or Javascript in order t...