EUVD-2025-81359

Malicious code in liza-validator-catalyst npm...

EUVD-2025-79805

Malicious code in anthony-validator-catalyst npm...

Malicious code in waldo-validator-catalyst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ba587d457551237e7ba3d7fb5f5e2642cd0b38d50acd43c1787e089dc8a62f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kristine-validator-catalyst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cec16c0a04891efad74b1c7fd4598c3024f112300985ac467642b7e15c869e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105320 Malicious code in lonny-validator-catalyst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1666a1dc9802d39cfb57705827af09f01d85f825ce6b3a71c212c75eccb8556c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99486 Malicious code in anthony-validator-catalyst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f21c6e8738a22ddbbc93a330eea082e5d007eeef170a121470efaee78d21f4fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105381 Malicious code in lucero-validator-catalyst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 504f84d1e97b34d43dd0a9ed513ce5c8454abde1066431965ce33b321ad4609d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103709 Malicious code in hicks-validator-catalyst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbf18ec8a00e5e7fd788ae4ce79aeeeb94d3e519dc00067043b7505f1cbd393f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-64518

The CycloneDX core module provides a model representation of the SBOM along with utilities to assist in creating, validating, and parsing SBOMs. Starting in version 2.1.0 and prior to version 11.0.1, the XML Validator used by cyclonedx-core-java was not configured securely, making the library...

XML External Entity (XXE) Injection

Overview Affected versions of this package are vulnerable to XML External Entity XXE Injection via the validation process which use XML Validator with not configured securely. An attacker can access sensitive information from internal files or external resources by submitting specially crafted XM...

PT-2025-46213

Name of the Vulnerable Software and Affected Versions CycloneDX versions 2.1.0 through 11.0.1 Description The CycloneDX core module, used for creating, validating, and parsing SBOMs, contains a flaw due to an insecurely configured XML Validator. This allows for XML External Entity XXE injection...

CycloneDX Core 代码问题漏洞

CycloneDX Core is a CycloneDX BOM Standard open source aid for creating SBOM applications. A code issue vulnerability exists in CycloneDX Core versions prior to 11.0.1 that stems from an unsecured configuration of the XML Validator, which could lead to an XML external entity injection attack...

Incomplete Filtering of One or More Instances of Special Elements

Overview validator is a library of string validators and sanitizers. Affected versions of this package are vulnerable to Incomplete Filtering of One or More Instances of Special Elements in the isLength function that does not take into account Unicode variation selectors \uFE0F, \uFE0E appearing ...

Incomplete Filtering of One or More Instances of Special Elements

Overview org.webjars.npm:validator is an A library of string validators and sanitizers. Affected versions of this package are vulnerable to Incomplete Filtering of One or More Instances of Special Elements in the isLength function that does not take into account Unicode variation selectors \uFE0F...

Malicious Package

Overview redux-saga-validator is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Ubuntu: Security Advisory (USN-7813-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS : FORT Validator vulnerabilities (USN-7813-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7813-1 advisory. Niklas Vogel and Haya Schulmann discovered that FORT Validator did not perform proper input validation when parsing certain RPKI...

USN-7813-1 fort-validator vulnerabilities

Niklas Vogel and Haya Schulmann discovered that FORT Validator did not perform proper input validation when parsing certain RPKI repository data. A remote attacker could possibly use this issue to cause FORT Validator to crash, resulting in a denial of service. CVE-2024-45234, CVE-2024-45235,...

USN-7813-1: FORT Validator vulnerabilities

Niklas Vogel and Haya Schulmann discovered that FORT Validator did not perform proper input validation when parsing certain RPKI repository data. A remote attacker could possibly use this issue to cause FORT Validator to crash, resulting in a denial of service. CVE-2024-45234, CVE-2024-45235,...

Linux Distros Unpatched Vulnerability : CVE-2025-56200

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A URL validation bypass vulnerability exists in validator.js through version 13.15.15. The isURL function uses '://' as a delimiter to parse protocols, while...