@0xbigboss/vite-plugin-web-extension (>=5.2.0, <=5.4.0), @58860ed6ffd9e897/gold-finger-extension (1.0.2) +55 more potentially affected by CVE-2025-55164 via content-security-policy-parser (>=0.1.1, <=0.4.1)

content-security-policy-parser NPM version =0.1.1, =5.2.0, =2.13.1-next.0, =2.12.1-canary.3354, =2.12.1-canary.3354, =2.12.5-beta.0, =0.84.3, =0.0.0-experimental-15dcc54, =0.0.0-experimental-4515339, =0.0.0-experimental-2cd2b9e, =0.0.0-experimental-15dcc54, =0.0.0-experimental-15dcc54,...

@0xbigboss/vite-plugin-web-extension (>=5.2.0, <=5.4.0), @58860ed6ffd9e897/gold-finger-extension (1.0.2) +55 more potentially affected by CVE-2025-55164 via content-security-policy-parser (>=0.1.1, <=0.5.0)

content-security-policy-parser NPM version =0.1.1, =5.2.0, =2.13.1-next.0, =2.12.1-canary.3354, =2.12.1-canary.3354, =2.12.5-beta.0, =0.84.3, =0.0.0-experimental-15dcc54, =0.0.0-experimental-4515339, =0.0.0-experimental-2cd2b9e, =0.0.0-experimental-15dcc54, =0.0.0-experimental-15dcc54,...

Prototype Pollution

Overview content-security-policy-parser is a Parse Content Security Policy directives. Affected versions of this package are vulnerable to Prototype Pollution via the parse function. An attacker can manipulate the Object prototype by supplying a crafted policy name in HTTP queries, potentially...

CVE-2025-55164 content-security-policy-parser Prototype Pollution Vulnerability May Lead to RCE

content-security-policy-parser parses content security policy directives. A prototype pollution vulnerability exists in versions 0.5.0 and earlier, wherein if a policy name is called proto, one can override the Object prototype. This issue has been patched in version 0.6.0. A workaround involves...

CVE-2025-55164

The vulnerability CVE-2025-55164 affects the content-security-policy-parser library. A prototype pollution flaw exists in versions ≤0.5.0 when a policy name of proto is provided, enabling override of Object.prototype. A fix is available in version 0.6.0 and later; remediation is to upgrade to 0.6...

Security update for python313

This update for python313 fixes the following issues: CVE-2025-8194: Fixed denial of service caused by tar archives with negative offsets bsc1247249. CVE-2025-6069: Avoid worst case quadratic complexity when processing certain crafted malformed inputs with HTMLParser bsc1244705. CVE-2025-4435:...

Security update for eclipse-jgit

This update for eclipse-jgit fixes the following issues: CVE-2025-4949: Fixed the XXE vulnerability in ManifestParser and AmazonS3 class bsc1243647. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternativel...

SUSE-SU-2025:02762-1 Security update for eclipse-jgit

This update for eclipse-jgit fixes the following issues: - CVE-2025-4949: Fixed the XXE vulnerability in ManifestParser and AmazonS3 class bsc1243647...

PT-2025-32688 · Unknown +1 · Content-Security-Policy-Parser +1

Name of the Vulnerable Software and Affected Versions: content-security-policy-parser versions 0.5.0 and earlier Description: The content-security-policy-parser software parses content security policy directives. A prototype pollution vulnerability exists in versions 0.5.0 and earlier, where...

Content Security Policy parser 安全漏洞

Content Security Policy parser is a Helmet open source for parsing content security policy directives. A security vulnerability exists in Content Security Policy parser version 0.5.0 and earlier, which stems from prototype contamination and could lead to object prototypes being overwritten...

PT-2025-32668

Name of the Vulnerable Software and Affected Versions: Apache bRPC versions prior to 1.14.1 Description: A flaw in the Redis parser within Apache bRPC allows unauthenticated remote attackers to crash services by triggering unlimited memory allocation. This issue affects the service via network...

Linux Distros Unpatched Vulnerability : CVE-2025-6494

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in sparklemotion nokogiri c29c920907366cb74af13b4dc2230e9c9e23b833. It has been classified as problematic. This affects the function...

GO-2025-3845 Fiber Crashes in BodyParser Due to Unvalidated Large Slice Index in Decoder in github.com/gofiber/fiber

Fiber Crashes in BodyParser Due to Unvalidated Large Slice Index in Decoder in github.com/gofiber/fiber...

BIT-LIBPYTHON-2025-6069 HTMLParser quadratic complexity when processing malformed inputs

The html.parser.HTMLParser class had worse-case quadratic complexity when processing certain crafted malformed inputs potentially leading to amplified denial-of-service...

BIT-LIBPYTHON-2024-50602

An issue was discovered in libexpat before 2.6.4. There is a crash within the XMLResumeParser function because XMLStopParser can stop/suspend an unstarted parser...

BIT-LIBPYTHON-2023-36632

The legacy email.utils.parseaddr function in Python through 3.11.4 allows attackers to trigger "RecursionError: maximum recursion depth exceeded while calling a Python object" via a crafted argument. This argument is plausibly an untrusted value from an application's input data that was supposed ...

AZL-66288 CVE-2025-8846 affecting package nasm 2.16-1

A vulnerability has been found in NASM Netwide Assember 2.17rc0. Affected is the function parseline of the file parser.c. The manipulation leads to stack-based buffer overflow. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used...

CVE-2025-8846

A vulnerability has been found in NASM Netwide Assember 2.17rc0. Affected is the function parseline of the file parser.c. The manipulation leads to stack-based buffer overflow. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used...

CVE-2025-8846

A vulnerability has been found in NASM Netwide Assember 2.17rc0. Affected is the function parseline of the file parser.c. The manipulation leads to stack-based buffer overflow. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used...

CVE-2025-8846

CVE-2025-8846 affects NASM Netwide Assembler 2.17rc0, specifically the parse_line function in parser.c. It enables a stack-based buffer overflow via a local exploit. The vulnerability impact is described as high in CVSS metrics (local access, high confidentiality/integrity/availability impact). A...