Malicious code in axios-carpo-spectroscopy-dotenv-parse-variables (npm)

The package axios-carpo-spectroscopy-dotenv-parse-variables was found to contain malicious code...

Malicious code in pino-pretty-deneb-dotenv-parse-variables-hugo (npm)

The package pino-pretty-deneb-dotenv-parse-variables-hugo was found to contain malicious code...

MAL-2025-15236 Malicious code in axios-carpo-spectroscopy-dotenv-parse-variables (npm)

The package axios-carpo-spectroscopy-dotenv-parse-variables was found to contain malicious code...

Malicious code in geochronology-markdown-jupiter-dotenv-parse-variables (npm)

The package geochronology-markdown-jupiter-dotenv-parse-variables was found to contain malicious code...

MAL-2025-39001 Malicious code in webdriverio-nucleosynthesis-fork-dotenv-parse-variables (npm)

The package webdriverio-nucleosynthesis-fork-dotenv-parse-variables was found to contain malicious code...

MAL-2025-18663 Malicious code in dotenv-parse-variables-norma-adonis-duplex (npm)

The package dotenv-parse-variables-norma-adonis-duplex was found to contain malicious code...

MAL-2025-17865 Malicious code in cybernetics-terser-webpack-plugin-phenomic-dotenv-parse-variables (npm)

The package cybernetics-terser-webpack-plugin-phenomic-dotenv-parse-variables was found to contain malicious code...

MAL-2025-18664 Malicious code in dotenv-parse-variables-scorpius-borealis-style-loader (npm)

The package dotenv-parse-variables-scorpius-borealis-style-loader was found to contain malicious code...

MAL-2025-29393 Malicious code in playwright-mocha-chai-dotenv-parse-variables (npm)

The package playwright-mocha-chai-dotenv-parse-variables was found to contain malicious code...

Malicious code in graviton-dactyl-helmet-dotenv-parse-variables (npm)

The package graviton-dactyl-helmet-dotenv-parse-variables was found to contain malicious code...

MAL-2025-29302 Malicious code in pino-pretty-deneb-dotenv-parse-variables-hugo (npm)

The package pino-pretty-deneb-dotenv-parse-variables-hugo was found to contain malicious code...

Malicious code in env-variables-extension (npm)

The package env-variables-extension was found to contain malicious code...

MAL-2025-23275 Malicious code in interferometry-bootes-gridsome-dotenv-parse-variables (npm)

The package interferometry-bootes-gridsome-dotenv-parse-variables was found to contain malicious code...

MAL-2025-21901 Malicious code in graviton-dactyl-helmet-dotenv-parse-variables (npm)

The package graviton-dactyl-helmet-dotenv-parse-variables was found to contain malicious code...

Malicious code in blazar-non-blocking-dotenv-parse-variables-test (npm)

The package blazar-non-blocking-dotenv-parse-variables-test was found to contain malicious code...

CVE-2025-7971

A security issues exists within Studio 5000 Logix Designer due to unsafe handling of environment variables. If the specified path lacks a valid file, Logix Designer crashes; However, it may be possible to execute malicious code without triggering a crash...

CVE-2025-7971

CVE-2025-7971 affects Rockwell Automation’s Studio 5000 Logix Designer. The issue arises from unsafe handling of environment variables, where a path without a valid file can cause the application to crash and, in some cases, may allow arbitrary code execution locally. The available connected sour...

httpd: insufficient escaping of user-supplied data in mod_ssl

A vulnerability was found in the Apache HTTP Server. Insufficient escaping of user-supplied data in modssl allows an untrusted SSL/TLS client to insert escape characters into log files in some configurations. In a logging configuration where CustomLog is used with "%varnamex" or "%varnamec" to...

Rockwell Automation Studio 5000 Logix Designer security vulnerabilities

Rockwell Automation Studio 5000 Logix Designer is a Windows-based application from Rockwell Automation, Inc. It is used to build programs for PLCs. A security vulnerability exists in Rockwell Automation Studio 5000 Logix Designer that stems from improper handling of environment variables could...

PT-2025-33298 · Rockwell Automation · Studio 5000 Logix Designer

Name of the Vulnerable Software and Affected Versions: Studio 5000 Logix Designer affected versions not specified Description: A security issue exists in Studio 5000 Logix Designer related to unsafe handling of environment variables. When a specified path does not contain a valid file, the softwa...