10 matches found
CVE-2026-0915-json-Patch.-V2.0
CVE-2026-0915-json-Patch.-V2.0 Patch the Bug - glibc 🔒 JSON Validator Security Patch Enterprise-grade solution for CVE-2026-0915 - Protects against insecure JSON parsing through strict schema validation. 🚨 Security Notice This patch fixes CVE-2026-0915 - a critical vulnerability in JSON parsing...
Malicious code in json-validator-utils (npm)
Source: amazon-inspector 255dbc17164a6243a92bab0b4d71132efad3028b53e73d7d2924a1d7ccd1e8cf The package advertises itself as a JSON/XML validator but lib/core.js contains a multi-stage dropper triggered on any call to the public API validateJson/validateXml. A hardcoded C2 URL is stored as an...
MAL-2026-12182 Malicious code in json-validator-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 255dbc17164a6243a92bab0b4d71132efad3028b53e73d7d2924a1d7ccd1e8cf The package advertises itself as a JSON/XML validator but lib/core.js contains a multi-stage dropper triggered on any call to the public API...
Malicious code in json-validator-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 255dbc17164a6243a92bab0b4d71132efad3028b53e73d7d2924a1d7ccd1e8cf The package advertises itself as a JSON/XML validator but lib/core.js contains a multi-stage dropper triggered on any call to the public API...
GHSA-425G-FJHQ-5H92 openssl-encrypt silently skips schema validation when jsonschema library is not installed
Summary In opensslencrypt/modules/jsonvalidator.py at lines 234-238, when the jsonschema library is not installed, all schema validation is silently skipped with only a print warning. Affected Code python if not JSONSCHEMAAVAILABLE: printf"Warning: Cannot validate against schema 'schemaname' -...
Malware in module-json-validator
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
MAL-2024-10761 Malicious code in module-json-validator (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 03f9de22e9d105a1442fd2bab315de0e956fcabbec66fbfa38d5e3452a01bc33 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in module-json-validator (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 03f9de22e9d105a1442fd2bab315de0e956fcabbec66fbfa38d5e3452a01bc33 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...