2574 matches found
MAL-2025-110068 Malicious code in underwood-validator-catalyst (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 435645f35b580c4eb180f2e208551b6febb35ae5ffe9d5fad2d5f1039637cd0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-105967 Malicious code in mooney-validator-catalyst (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f30af66d18545ef8be075b3600519826353e00aacf02270aea5dc21cbc13e24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-107807 Malicious code in reginald-validator-catalyst (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0190c6bef403b79452ddcb23e3420f8f97b434c7075b127ccd5da27c2861bea1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
CVE-2025-64518
The CycloneDX core module provides a model representation of the SBOM along with utilities to assist in creating, validating, and parsing SBOMs. Starting in version 2.1.0 and prior to version 11.0.1, the XML Validator used by cyclonedx-core-java was not configured securely, making the library...
XML External Entity (XXE) Injection
Overview Affected versions of this package are vulnerable to XML External Entity XXE Injection via the validation process which use XML Validator with not configured securely. An attacker can access sensitive information from internal files or external resources by submitting specially crafted XM...
CycloneDX Core 代码问题漏洞
CycloneDX Core is a CycloneDX BOM Standard open source aid for creating SBOM applications. A code issue vulnerability exists in CycloneDX Core versions prior to 11.0.1 that stems from an unsecured configuration of the XML Validator, which could lead to an XML external entity injection attack...
PT-2025-46213
Name of the Vulnerable Software and Affected Versions CycloneDX versions 2.1.0 through 11.0.1 Description The CycloneDX core module, used for creating, validating, and parsing SBOMs, contains a flaw due to an insecurely configured XML Validator. This allows for XML External Entity XXE injection...
CVE-2025-64518: Improper Restriction of XML External Entity Reference
The CycloneDX core module provides a model representation of the SBOM along with utilities to assist in creating, validating, and parsing SBOMs. Starting in version 2.1.0 and prior to version 11.0.1, the XML Validator used by cyclonedx-core-java was not configured securely, making the library...
wasmedge:wasmedge-fuzztool: Crash in WasmEdge::Validator::FormChecker::checkInstr
Project: https://github.com/WasmEdge/WasmEdge.git Detailed Report: https://oss-fuzz.com/testcase?key=5556464661102592 Project: wasmedge Fuzzing Engine: afl Fuzz Target: wasmedge-fuzztool Job Type: aflasanwasmedge Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7aac77174380 Crash Stat...
7ghost (>=4.11.0, <=4.11.46), @100k/type-graphql-filter-mikroorm (>=0.0.1, <=0.3.5) +1608 more potentially affected by CVE-2025-12758 via validator (>=13.0.0, <=13.15.20)
validator NPM version =13.0.0, =4.11.0, =0.0.1, =1.0.0, =0.0.0-dev-20240828032938, =0.1.1, =0.0.0-dev-20240828032938, =0.0.0-dev-20240828032938, =0.0.0-dev-20240828032938, =0.0.0-dev-20240828032938, =0.0.0-dev-20240828032938, =0.0.0-dev-20240828032938, =0.0.0-dev-20240828032938,...
Incomplete Filtering of One or More Instances of Special Elements
Overview org.webjars.npm:validator is an A library of string validators and sanitizers. Affected versions of this package are vulnerable to Incomplete Filtering of One or More Instances of Special Elements in the isLength function that does not take into account Unicode variation selectors \uFE0F...
org.webjars.npm:class-validator (>=0.13.2, <=0.14.0), org.webjars.npm:image-thumbnail (1.0.15) +1 more potentially affected by CVE-2025-12758 via org.webjars.npm:validator (13.12.0)
org.webjars.npm:validator MAVEN version 13.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:validator and may be impacted: - org.webjars.npm:class-validator =0.13.2, =0.14.0 - org.webjars.npm:image-thumbnail 1.0.15 -...
Incomplete Filtering of One or More Instances of Special Elements
Overview validator is a library of string validators and sanitizers. Affected versions of this package are vulnerable to Incomplete Filtering of One or More Instances of Special Elements in the isLength function that does not take into account Unicode variation selectors \uFE0F, \uFE0E appearing ...
Malicious Package
Overview redux-saga-validator is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS : FORT Validator vulnerabilities (USN-7813-1)
The remote Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7813-1 advisory. Niklas Vogel and Haya Schulmann discovered that FORT Validator did not perform proper input validation when parsing certain RPKI...
Ubuntu: Security Advisory (USN-7813-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-7813-1 fort-validator vulnerabilities
Niklas Vogel and Haya Schulmann discovered that FORT Validator did not perform proper input validation when parsing certain RPKI repository data. A remote attacker could possibly use this issue to cause FORT Validator to crash, resulting in a denial of service. CVE-2024-45234, CVE-2024-45235,...
USN-7813-1: FORT Validator vulnerabilities
Niklas Vogel and Haya Schulmann discovered that FORT Validator did not perform proper input validation when parsing certain RPKI repository data. A remote attacker could possibly use this issue to cause FORT Validator to crash, resulting in a denial of service. CVE-2024-45234, CVE-2024-45235,...
Linux Distros Unpatched Vulnerability : CVE-2025-56200
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A URL validation bypass vulnerability exists in validator.js through version 13.15.15. The isURL function uses '://' as a delimiter to parse protocols, while...
