28 matches found
Malicious code in abakuc-localizer (npm)
The package abakuc-localizer was found to contain malicious code. --- Credit: OpenSSF source...
CVE-2026-13048
Data::MuForm::Localizer versions through 0.05 for Perl execute Perl from a message catalog header, reached at an arbitrary path because loadlexicon interpolates the language attribute into the catalog filename. loadlexicon builds the catalog path by appending Messages/$lang.po to the directory...
CVE-2026-13048
Data::MuForm::Localizer versions through 0.05 for Perl execute Perl from a message catalog header, reached at an arbitrary path because loadlexicon interpolates the language attribute into the catalog filename. loadlexicon builds the catalog path by appending Messages/$lang.po to the directory...
CVE-2026-13048 Data::MuForm::Localizer versions through 0.05 for Perl execute Perl from a message catalog header, reached at an arbitrary path because load_lexicon interpolates the language attribute into the catalog filename
Data::MuForm::Localizer versions through 0.05 for Perl execute Perl from a message catalog header, reached at an arbitrary path because loadlexicon interpolates the language attribute into the catalog filename. loadlexicon builds the catalog path by appending Messages/$lang.po to the directory...
CVE-2026-13048
The Data::MuForm::Localizer Perl module (versions through 0.05 ) is vulnerable to remote code execution due to improper neutralization of directives in dynamically evaluated code. The load_lexicon function fails to validate the language attribute, allowing an attacker to use ../ segments to trave...
CVE-2026-13048 Data::MuForm::Localizer versions through 0.05 for Perl execute Perl from a message catalog header, reached at an arbitrary path because load_lexicon interpolates the language attribute into the catalog filename
Data::MuForm::Localizer versions through 0.05 for Perl execute Perl from a message catalog header, reached at an arbitrary path because loadlexicon interpolates the language attribute into the catalog filename. loadlexicon builds the catalog path by appending Messages/$lang.po to the directory...
CVE-2026-13048
Data::MuForm::Localizer versions through 0.05 for Perl execute Perl from a message catalog header, reached at an arbitrary path because loadlexicon interpolates the language attribute into the catalog filename. loadlexicon builds the catalog path by appending "Messages/$lang.po" to the directory...
EUVD-2026-58117
Data::MuForm::Localizer versions through 0.05 for Perl execute Perl from a message catalog header, reached at an arbitrary path because loadlexicon interpolates the language attribute into the catalog filename. loadlexicon builds the catalog path by appending Messages/$lang.po to the directory...
PT-2026-71694
Name of the Vulnerable Software and Affected Versions Data::MuForm::Localizer versions prior to 0.06 Description Remote code execution is possible because the load lexicon function interpolates the language attribute into the catalog filename without validating that it is a bare locale tag. An...
CVE-2026-13048: Improper Neutralization of Directives in Dynamically Evaluated Code
Data::MuForm::Localizer versions through 0.05 for Perl execute Perl from a message catalog header, reached at an arbitrary path because loadlexicon interpolates the language attribute into the catalog filename. loadlexicon builds the catalog path by appending Messages/$lang.po to the directory...
EUVD-2008-1974
Malware in sbrugna...
MAL-2025-13943 Malicious code in abakuc-localizer (npm)
The package abakuc-localizer was found to contain malicious code...
Malicious code in abakuc-localizer (npm)
The package abakuc-localizer was found to contain malicious code...
MAL-2024-11472 Malicious code in thd-localizer (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in thd-localizer (npm)
--- -= Per source details. Do not edit below this line.=-...
Malware in mep-widget-localizer
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
MAL-2022-4555 Malicious code in mep-widget-localizer (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f310734c8e72d28f8d9892e831726d172b517373a6c79419ca315bb718bf7013 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in mep-widget-localizer (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f310734c8e72d28f8d9892e831726d172b517373a6c79419ca315bb718bf7013 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2020-7791
CVE-2020-7791 affects the i18n package before 2.1.15. Root cause: insufficient handling of erroneous language tags in src/i18n/Concrete/TextLocalizer.cs and src/i18n/LocalizedApplication.cs. Impact: Denial of service ( DoS ), including a null pointer dereference per Veracode reference, with condi...
