com.jgeppert.struts2.bootstrap:struts2-bootstrap-plugin (6.0.0), com.jgeppert.struts2.bootstrap:struts2-bootstrap-showcase (6.0.0) +53 more potentially affected by CVE-2025-66675 via org.apache.struts:struts2-core (>=7.0.0, <=7.0.3)

org.apache.struts:struts2-core MAVEN version =7.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.3 and more Source cves: CVE-2025-66675 Source advisory: GHSA-RG58-XHH7-MQJW...

EUVD-2021-0508

Malware in sbrugna...

EUVD-2024-50040

Malicious code in bioql PyPI...

EUVD-2022-6329

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2022-31147

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The jQuery Validation Plugin jquery-validation provides drop-in validation for forms. Versions of jquery-validation prior to 1.19.5 are vulnerable to regular...

CVE-2022-2144

The Jquery Validation For Contact Form 7 WordPress plugin before 5.3 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change Blog options like defaultrole, userscanregister via a CSRF attack...

Linux Distros Unpatched Vulnerability : CVE-2021-21252

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The jQuery Validation Plugin provides drop-in validation for your existing forms. It is published as an npm package jquery-validation. jquery-validation before...

com.github.a-pz:struts2-thymeleaf3-plugin (>=1.0.0-release, <=1.0.1-release), com.jgeppert.struts2.jquery:struts2-jquery-chart-plugin (4.0.1) +44 more potentially affected by CVE-2024-53677 via org.apache.struts:struts2-core (2.5.5)

org.apache.struts:struts2-core MAVEN version 2.5.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.struts:struts2-core and may be impacted: - com.github.a-pz:struts2-thymeleaf3-plugin =1.0.0-release, =1.0.1-release -...

com.jgeppert.struts2.jquery:struts2-jquery-chart-plugin (4.0.3), com.jgeppert.struts2.jquery:struts2-jquery-datatables-plugin (4.0.3) +45 more potentially affected by CVE-2024-53677 via org.apache.struts:struts2-core (2.5.14.1)

org.apache.struts:struts2-core MAVEN version 2.5.14.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.struts:struts2-core and may be impacted: - com.jgeppert.struts2.jquery:struts2-jquery-chart-plugin 4.0.3 -...

com.amazonaws.serverless:aws-serverless-java-container-struts2 (>=1.3.1, <=1.5.1), com.jgeppert.struts2:struts2-aws-lambda-support-plugin (1.2.0) +41 more potentially affected by CVE-2024-53677 via org.apache.struts:struts2-core (2.5.20)

org.apache.struts:struts2-core MAVEN version 2.5.20 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.struts:struts2-core and may be impacted: - com.amazonaws.serverless:aws-serverless-java-container-struts2 =1.3.1, =3.0-alpha-48, =3.0-alpha-4...

com.amashchenko.struts2.pdfstream:struts2-pdfstream-plugin (2.0.0), com.amashchenko.struts2.pdfstream:struts2-pdfstream-showcase (2.0.0) +37 more potentially affected by CVE-2024-53677 via org.apache.struts:struts2-core (2.5)

org.apache.struts:struts2-core MAVEN version 2.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.struts:struts2-core and may be impacted: - com.amashchenko.struts2.pdfstream:struts2-pdfstream-plugin 2.0.0 -...

com.moomanow.web.struts:struts-moo-authentication-tag (>=0.0.9, <=0.0.12), com.moomanow.web.struts:struts-moo-select-tag (>=0.0.11, <=0.0.12) +39 more potentially affected by CVE-2024-53677 via org.apache.struts:struts2-core (2.5.2)

org.apache.struts:struts2-core MAVEN version 2.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.struts:struts2-core and may be impacted: - com.moomanow.web.struts:struts-moo-authentication-tag =0.0.9, =0.0.11, =0.0.9, =0.0.1, =0.0.4,...

BIT-APISIX-2022-25757 Apache APISIX: the body_schema check in request-validation plugin can be bypassed

In Apache APISIX before 2.13.0, when decoding JSON with duplicate keys, lua-cjson will choose the last occurred value as the result. By passing a JSON with a duplicate key, the attacker can bypass the bodyschema validation in the request-validation plugin. For example,...

jQuery Validation Plugin url2 DoS

The vulnerability of the url2 method in the jQuery Validation Plugin involves incorrect handling of regular expressions. Exploiting this vulnerability could allow an attacker to cause a service failure...

Security Bulletin: IBM Engineering Workflow Management (EWM) vulnerability CVE-2021-21252

Summary There is a vulnerability CVE-2021-21252 which affects IBM Engineering Workflow Management EWM. Vulnerability Details CVEID:CVE-2021-21252 DESCRIPTION: jQuery Validation Plugin is vulnerable to a denial of service, caused by a regular expression denial of service ReDoS flaw when validating...

CVE-2022-31147

The jQuery Validation Plugin jquery-validation provides drop-in validation for forms. Versions of jquery-validation prior to 1.19.5 are vulnerable to regular expression denial of service ReDoS when an attacker is able to supply arbitrary input to the url2 method. This is due to an incomplete fix...

UBUNTU-CVE-2022-31147

The jQuery Validation Plugin jquery-validation provides drop-in validation for forms. Versions of jquery-validation prior to 1.19.5 are vulnerable to regular expression denial of service ReDoS when an attacker is able to supply arbitrary input to the url2 method. This is due to an incomplete fix...

CVE-2022-31147

The jQuery Validation Plugin jquery-validation provides drop-in validation for forms. Versions of jquery-validation prior to 1.19.5 are vulnerable to regular expression denial of service ReDoS when an attacker is able to supply arbitrary input to the url2 method. This is due to an incomplete fix...

Input validation

The jQuery Validation Plugin jquery-validation provides drop-in validation for forms. Versions of jquery-validation prior to 1.19.5 are vulnerable to regular expression denial of service ReDoS when an attacker is able to supply arbitrary input to the url2 method. This is due to an incomplete fix...

CVE-2022-31147

The jQuery Validation Plugin jquery-validation provides drop-in validation for forms. Versions of jquery-validation prior to 1.19.5 are vulnerable to regular expression denial of service ReDoS when an attacker is able to supply arbitrary input to the url2 method. This is due to an incomplete fix...