OESA-2024-2121 expat security update

expat is a stream-oriented XML parser library written in C. expat excels with files too large to fit RAM, and where performance and flexibility are crucial. Security Fixes: An issue was discovered in libexpat before 2.6.3. dtdCopy in xmlparse.c can have an integer overflow for nDefaultAtts on...

CLSA-2024-1726163202 expat: Fix of 3 CVEs

The release version was raised because it corresponds to version 13 - CVE-2024-45490: reject negative len for XMLParseBuffer to prevent improper restriction of XML External Entity Reference - CVE-2024-45491: prevent integer overflow in dtdCopy - CVE-2024-45492: prevent integer overflow in...

SUSE CVE-2024-45492

An issue was discovered in libexpat before 2.6.3. nextScaffoldPart in xmlparse.c can have an integer overflow for mgroupSize on 32-bit platforms where UINTMAX equals SIZEMAX...

UBUNTU-CVE-2024-45492

An issue was discovered in libexpat before 2.6.3. nextScaffoldPart in xmlparse.c can have an integer overflow for mgroupSize on 32-bit platforms where UINTMAX equals SIZEMAX...

MAL-2024-6439 Malicious code in active-scaffold_config_list_vho (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in active-scaffold_batch_vho (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2023-8113 Malicious code in developer-scaffold-full-width-wrapper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware de16c923e65362f8728b3d71ad9d78042c8f28793d8d720d387faf6316d8b174 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

expat: Integer overflow in nextScaffoldPart in xmlparse.c

expat libexpat is susceptible to a software flaw that causes process interruption. When processing a large number of prefixed XML attributes on a single tag can libexpat can terminate unexpectedly due to integer overflow. The highest threat from this vulnerability is to availability,...

CLSA-2022-1660762248 Fixed 13 CVEs in expat

CVE-2022-25236: Fix insertion of namespace-separator characters into namespace URIs - CVE-2022-25235: Fix malformed UTF-8 sequences which can lead to arbitrary code execution - CVE-2022-25315: Fix integer overflow in storeRawNames - CVE-2022-22822: Fix integer overflow in addBinding -...

CLSA-2022-1660757175 Fixed 15 CVEs in expat

CVE-2022-25236: Fix insertion of namespace-separator characters into namespace URIs - CVE-2022-25235: Fix malformed UTF-8 sequences which can lead to arbitrary code execution - CVE-2022-25315: Fix integer overflow in storeRawNames - CVE-2022-22822: Fix integer overflow in addBinding -...

scaffold-helper denial-of-service vulnerability

scaffold-helper is able to copy files and folders from a source directory to a destination directory using template styles in template files. scaffold-helper version v1.2.0 has a denial of service vulnerability that can be exploited by attackers to cause a denial of service when copying invalid...

Regular Expression Denial Of Service (ReDoS)

scaffold-helper is vulnerable to regular expression denial of service ReDoS attacks. A remote attacker is able to trigger denial of service conditions due to insufficient checks in getProcessedPath or getDynamicFilename functions. The vulnerability is exploited via copying crafted invalid files...

CVE-2021-40898

A Regular Expression Denial of Service ReDOS vulnerability was discovered in scaffold-helper v1.2.0 when copying crafted invalid files...

CVE-2021-40898

A Regular Expression Denial of Service ReDOS vulnerability was discovered in scaffold-helper v1.2.0 when copying crafted invalid files...

CVE-2021-40898

A Regular Expression Denial of Service ReDOS vulnerability was discovered in scaffold-helper v1.2.0 when copying crafted invalid files...

CVE-2021-40898

CVE-2021-40898 affects scaffold-helper v1.2.0, where copying crafted invalid files triggers a Regular Expression Denial of Service (ReDoS). The issue stems from inefficient/insufficient checks in the regex paths used by getProcessedPath or getDynamicFilename during copy operations, enabling poten...

CVE-2021-40898

A Regular Expression Denial of Service ReDOS vulnerability was discovered in scaffold-helper v1.2.0 when copying crafted invalid files...

PT-2022-11326 · Unknown · Scaffold-Helper

Name of the Vulnerable Software and Affected Versions: scaffold-helper version 1.2.0 Description: A Regular Expression Denial of Service ReDOS issue was found in scaffold-helper when copying crafted invalid files. This occurs due to inefficient regular expression handling, which can lead to...

scaffold-helper 安全漏洞

scaffold-helper is able to copy files and folders from a source directory to a destination directory using template styles in template files. scaffold-helper version v1.2.0 has a denial of service vulnerability that can be exploited by attackers to cause a denial of service when copying invalid...

Malicious code in huobi-bs-fe-scaffold (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bac5154dea0a0982316b2a0d54d6df43f25cd76daacac6d47c2b7a3bee9e0f4f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...