MAL-2025-25593 Malicious code in loopback-connector-soap-elemetal (npm)

The package loopback-connector-soap-elemetal was found to contain malicious code...

MAL-2025-33578 Malicious code in soap-titan-terser-webpack-plugin-betelgeuse (npm)

The package soap-titan-terser-webpack-plugin-betelgeuse was found to contain malicious code...

MAL-2025-33572 Malicious code in soap-fetch-sociobiology-winston (npm)

The package soap-fetch-sociobiology-winston was found to contain malicious code...

MAL-2025-23958 Malicious code in json-soap-postcss-tectonic (npm)

The package json-soap-postcss-tectonic was found to contain malicious code...

Malicious code in loopback-connector-soap-elemetal (npm)

The package loopback-connector-soap-elemetal was found to contain malicious code...

MAL-2025-33576 Malicious code in soap-repository (npm)

The package soap-repository was found to contain malicious code...

MAL-2025-33573 Malicious code in soap-gravity-jsonp-oauth (npm)

The package soap-gravity-jsonp-oauth was found to contain malicious code...

Malicious code in css-loader-quito-soap-ursa (npm)

The package css-loader-quito-soap-ursa was found to contain malicious code...

MAL-2025-25484 Malicious code in local-phoebe-soap-react-bootstrap (npm)

The package local-phoebe-soap-react-bootstrap was found to contain malicious code...

Malicious code in soap-local-celeste-magellan (npm)

The package soap-local-celeste-magellan was found to contain malicious code...

BIT-LIBPHP-2025-6491 NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix

In PHP versions:8.1. before 8.1.33, 8.2. before 8.2.29, 8.3. before 8.3.23, 8.4. before 8.4.10 when parsing XML data in SOAP extensions, overly large 2Gb XML namespace prefix may lead to null pointer dereference. This may lead to crashes and affect the availability of the target server...

BIT-LIBPHP-2023-3247 Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP

In PHP versions 8.0. before 8.0.29, 8.1. before 8.1.20, 8.2. before 8.2.7 when using SOAP HTTP Digest Authentication, random value generator was not checked for failure, and was using narrower range of values than it should have. In case of random generator failure, it could lead to a disclosure ...

BIT-LIBPHP-2021-21702 Null Dereference in SoapClient

In PHP versions 7.3.x below 7.3.27, 7.4.x below 7.4.15 and 8.0.x below 8.0.2, when using SOAP extension to connect to a SOAP server, a malicious SOAP server could return malformed XML data as a response that would cause PHP to access a null pointer and thus cause a crash...

[SECURITY] Fedora 41 Update: libsoup3-3.6.5-2.fc41

Libsoup is an HTTP library implementation in C. It was originally part of a SOAP Simple Object Access Protocol implementation called Soup, but the SOAP and non-SOAP parts have now been split into separate packages. libsoup uses the Glib main loop and is designed to work well with GTK applications...

[SECURITY] Fedora 42 Update: libsoup3-3.6.5-2.fc42

Libsoup is an HTTP library implementation in C. It was originally part of a SOAP Simple Object Access Protocol implementation called Soup, but the SOAP and non-SOAP parts have now been split into separate packages. libsoup uses the Glib main loop and is designed to work well with GTK applications...

CLSA-2025-1753798945 php: Fix of 3 CVEs

CVE-2025-1220: error if host contains null bytes in the middle of the string - CVE-2025-6491: fix NULL pointer dereference vulnerability in soap - CVE-2025-1735: add error error checks for escape function is pgsql and pdopgsql extensions...

CLSA-2025-1753793859 php: Fix of 3 CVEs

CVE-2025-1220: error if host contains null bytes in the middle of the string - CVE-2025-6491: fix NULL pointer dereference vulnerability in soap - CVE-2025-1735: add error error checks for escape function is pgsql and pdopgsql extensions...

CLSA-2025-1753465703 php: Fix of 3 CVEs

CVE-2025-1220: error if host contains null bytes in the middle of the string - CVE-2025-6491: fix NULL pointer dereference vulnerability in soap - CVE-2025-1735: add error error checks for escape function is pgsql and pdopgsql extensions...

HP OfficeJet Pro Printers Denial of Service (CVE-2023-4694)

Certain HP OfficeJet Pro printers are potentially vulnerable to a Denial of Service when sending a SOAP message to the service on TCP port 3911 that contains a body but no header. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information...

OESA-2025-1888 php security update

PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is...