MAL-2025-33572 Malicious code in soap-fetch-sociobiology-winston (npm)

The package soap-fetch-sociobiology-winston was found to contain malicious code...

MAL-2025-19862 Malicious code in eslint-plugin-restart-vega-soap (npm)

The package eslint-plugin-restart-vega-soap was found to contain malicious code...

MAL-2025-23613 Malicious code in janus-soap-lyra-cosmochemistry (npm)

The package janus-soap-lyra-cosmochemistry was found to contain malicious code...

MAL-2025-16981 Malicious code in child-process-rigel-soap-comet (npm)

The package child-process-rigel-soap-comet was found to contain malicious code...

MAL-2025-33578 Malicious code in soap-titan-terser-webpack-plugin-betelgeuse (npm)

The package soap-titan-terser-webpack-plugin-betelgeuse was found to contain malicious code...

MAL-2025-33574 Malicious code in soap-jsonp-registry-local (npm)

The package soap-jsonp-registry-local was found to contain malicious code...

MAL-2025-25593 Malicious code in loopback-connector-soap-elemetal (npm)

The package loopback-connector-soap-elemetal was found to contain malicious code...

MAL-2025-33576 Malicious code in soap-repository (npm)

The package soap-repository was found to contain malicious code...

MAL-2025-26257 Malicious code in meteor-yonder-soap-hermes (npm)

The package meteor-yonder-soap-hermes was found to contain malicious code...

MAL-2025-23094 Malicious code in impulse-resonance-soap-cryonics (npm)

The package impulse-resonance-soap-cryonics was found to contain malicious code...

Malicious code in css-loader-quito-soap-ursa (npm)

The package css-loader-quito-soap-ursa was found to contain malicious code...

MAL-2025-23958 Malicious code in json-soap-postcss-tectonic (npm)

The package json-soap-postcss-tectonic was found to contain malicious code...

MAL-2025-33577 Malicious code in soap-sirius-delphinus-brane (npm)

The package soap-sirius-delphinus-brane was found to contain malicious code...

MAL-2025-28644 Malicious code in package-jsonp-json-soap (npm)

The package package-jsonp-json-soap was found to contain malicious code...

BIT-LIBPHP-2025-6491 NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix

In PHP versions:8.1. before 8.1.33, 8.2. before 8.2.29, 8.3. before 8.3.23, 8.4. before 8.4.10 when parsing XML data in SOAP extensions, overly large 2Gb XML namespace prefix may lead to null pointer dereference. This may lead to crashes and affect the availability of the target server...

BIT-LIBPHP-2023-3247 Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP

In PHP versions 8.0. before 8.0.29, 8.1. before 8.1.20, 8.2. before 8.2.7 when using SOAP HTTP Digest Authentication, random value generator was not checked for failure, and was using narrower range of values than it should have. In case of random generator failure, it could lead to a disclosure ...

BIT-LIBPHP-2021-21702 Null Dereference in SoapClient

In PHP versions 7.3.x below 7.3.27, 7.4.x below 7.4.15 and 8.0.x below 8.0.2, when using SOAP extension to connect to a SOAP server, a malicious SOAP server could return malformed XML data as a response that would cause PHP to access a null pointer and thus cause a crash...

[SECURITY] Fedora 41 Update: libsoup3-3.6.5-2.fc41

Libsoup is an HTTP library implementation in C. It was originally part of a SOAP Simple Object Access Protocol implementation called Soup, but the SOAP and non-SOAP parts have now been split into separate packages. libsoup uses the Glib main loop and is designed to work well with GTK applications...

[SECURITY] Fedora 42 Update: libsoup3-3.6.5-2.fc42

Libsoup is an HTTP library implementation in C. It was originally part of a SOAP Simple Object Access Protocol implementation called Soup, but the SOAP and non-SOAP parts have now been split into separate packages. libsoup uses the Glib main loop and is designed to work well with GTK applications...

CLSA-2025-1753798945 php: Fix of 3 CVEs

CVE-2025-1220: error if host contains null bytes in the middle of the string - CVE-2025-6491: fix NULL pointer dereference vulnerability in soap - CVE-2025-1735: add error error checks for escape function is pgsql and pdopgsql extensions...