190 matches found
CVE-2026-109563
A flaw was found in N3.js. A remote attacker can cause a Denial of Service DoS by supplying specially crafted Turtle or N3 document input containing long sequences of digits that do not complete a valid number. Due to inefficient regular expression evaluation in the lexical analyzer N3Lexer,...
CVE-2026-92610
In esmf-sdk-py-aspect-model-loader versions 2.1.2 to 2.2.1, the Aspect Model loader resolves cross-file model references by extracting the third and fourth colon-separated components of any urn:samm:… namespace declared in a parsed Turtle file to build a directory to scan. A model file containing...
EUVD-2026-115715
In esmf-sdk-py-aspect-model-loader versions 2.1.2 to 2.2.1, the Aspect Model loader resolves cross-file model references by extracting the third and fourth colon-separated components of any urn:samm:… namespace declared in a parsed Turtle file to build a directory to scan. A model file containing...
CVE-2026-92610
The esmf-sdk-py-aspect-model-loader component (versions 2.1.2 to 2.2.1 ) is vulnerable to a path traversal (CWE-22) issue. The Aspect Model loader resolves cross-file model references by extracting specific components from any urn:samm:… namespace declared in a parsed Turtle file to construct a s...
Red Hat: CVE-2025-71436: raptor2: raptor2: arbitrary code execution via heap-based buffer overflow in language tag handling
Raptor RDF Syntax Library from 2.0.15 through 2.0.16 contains a heap-based buffer overflow vulnerability in raptornewtermfromcountedliteral caused by truncating language tag length to an unsigned char. Attackers can supply Turtle, TriG, N-Triples or N-Quads documents with language tags of 256 byt...
CVE-2026-109563 N3.js before 2.11.1 ReDoS via N3Lexer Numeric-Literal Regex
N3.js before 2.11.1 contains a regular expression denial of service vulnerability in the N3Lexer number pattern that backtracks quadratically on long digit runs. Attackers can supply untrusted Turtle or N3 input containing long runs of digits that do not end a number, blocking the Node.js event...
CVE-2026-109563 N3.js before 2.11.1 ReDoS via N3Lexer Numeric-Literal Regex
N3.js before 2.11.1 contains a regular expression denial of service vulnerability in the N3Lexer number pattern that backtracks quadratically on long digit runs. Attackers can supply untrusted Turtle or N3 input containing long runs of digits that do not end a number, blocking the Node.js event...
Rocky Linux 9 [CIQ] Security Update: raptor2 / raptor2-debuginfo / raptor2-debugsource / raptor2-devel (crlsa-2025_0312)
The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20250312 advisory. raptor: integer underflow when normalizing a URI with the turtle parser CVE-2024-57823 Tenable has extracted the preceding description block directly from the CIQ...
Rocky Linux 8 [CIQ] Security Update: raptor2 / raptor2-debuginfo / raptor2-debugsource / raptor2-devel (crlsa-2025_0314)
The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20250314 advisory. raptor: integer underflow when normalizing a URI with the turtle parser CVE-2024-57823 Tenable has extracted the preceding description block directly from the CIQ...
Malicious code in level-aqua-turtle (npm)
Source: amazon-inspector 7d1080c08842338178824d12a0dd1267a9d38ac725da62ac95a1df8145161273 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in independent-silver-turtle (npm)
Source: amazon-inspector c5146524a5491b8f8b5b0d7c09096983c8cad001e274ccbbf4cd31e4e6fa070d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in glorious-aquamarine-turtle (npm)
Source: amazon-inspector 3199eb1102e7cdc6644a53af53841abdafbd88403f0b306755c2662060482348 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in crowded-amaranth-turtle (npm)
Source: amazon-inspector 68ae3e3bae98e5d75acb2a9b064fbb088e6fdf5a09bc8b163ace656a28155ad9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in coherent-peach-turtle (npm)
Source: amazon-inspector 3a91c624ec934c4613f3d9a1052cdf20d9c38c4d279ea67414f346a5cfce9718 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in chronic-plum-turtle (npm)
Source: amazon-inspector cfff1e7c07a94cc367318e38952d8c58a35c3ff7b78e18f97fbb1bb953368c38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in actual-turquoise-turtle (npm)
Source: amazon-inspector 5656eb44aaa094427fcb494a122ef8efcb1557b55a785ccff22de593838a76fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: raptor2 (UTSA-2026-005330)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005330 advisory. In Raptor RDF Syntax Library through 2.0.16, there is an integer underflow when normalizing a URI with the turtle parser in raptorurinormalizepath. Tenable has...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: raptor2 (UTSA-2026-005274)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005274 advisory. In Raptor RDF Syntax Library through 2.0.16, there is an integer underflow when normalizing a URI with the turtle parser in raptorurinormalizepath. Tenable has...
Ubuntu 16.04 LTS / 18.04 LTS : Raptor vulnerabilities (USN-7869-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7869-1 advisory. Hanno Bck discovered that Raptor incorrectly handled memory operations when processing certain input files. An attacker could possibly use th...