56107 matches found
[SECURITY] Fedora 41 Update: yq-4.47.1-2.fc41
Yq is a portable command-line YAML, JSON, XML, CSV, TOML and properties processor...
[SECURITY] Fedora 42 Update: yq-4.47.1-2.fc42
Yq is a portable command-line YAML, JSON, XML, CSV, TOML and properties processor...
defusedxml
This is a Python library called defusedxml, which is designed to prevent XML bomb denial of service DoS vulnerabilities. The library provides a facade for the standard library's xml.etree.ElementTree module, which is vulnerable to XML bombs. The defusedxml library defuses XML bombs by preventing...
CVE-2025-41040
A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due to a lack of proper validation of user input, through the 'datacode', 'datalang0key', 'datalang0value', 'datalang1key' and 'datatitle' parameters in /apprain/developer/language/lipsum.xm...
php-saml
This is a PHP SAML toolkit for adding SAML support to PHP software. It is a library provided and supported by OneLogin Inc. The library is compatible with PHP versions greater than 7.1. The library includes features such as: Support for SAML 2.0 Support for SAML 1.1 Support for SAML 1.0 Support f...
defusedxml
This is a Python library called defusedxml, which is designed to prevent XML bomb denial of service DoS vulnerabilities. The library provides a facade for the xml.etree.ElementTree module, which is a built-in Python module for parsing and creating XML documents. The library is maintained by...
VulnCheck KEV: CVE-2025-54125
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. XWiki Platform Legacy Old Core and XWiki Platform Old Core versions 1.1 through 16.4.6, 16.5.0-rc-1 through 16.10.4 and 17.0.0-rc-1 through 17.1.0, the XML export of a page in XWiki that can b...
Security Bulletin: Multiple vulnerabilities in IBM MQ Operator and Queue manager container images
Summary Multiple vulnerabilities were addressed in IBM MQ Operator and Queue manager container images Vulnerability Details CVEID:CVE-2025-32415 DESCRIPTION: In libxml2 before 2.13.8 and 2.14.x before 2.14.2, xmlSchemaIDCFillNodeTables in xmlschemas.c has a heap-based buffer under-read. To exploi...
Malicious code in xml-juno-changelog-hyperion (npm)
The package xml-juno-changelog-hyperion was found to contain malicious code...
Malicious code in wind-decode-serialize-balance-xml (npm)
The package wind-decode-serialize-balance-xml was found to contain malicious code...
Malicious code in polaris-node-config-graphql-xml (npm)
The package polaris-node-config-graphql-xml was found to contain malicious code...
MAL-2025-46737 Malicious code in xml-juno-changelog-hyperion (npm)
The package xml-juno-changelog-hyperion was found to contain malicious code...
MAL-2025-45575 Malicious code in polaris-node-config-graphql-xml (npm)
The package polaris-node-config-graphql-xml was found to contain malicious code...
Malicious code in convict-betelgeuse-archaeoastronomy-xml (npm)
The package convict-betelgeuse-archaeoastronomy-xml was found to contain malicious code...
Malicious code in xml-epsilon-double-emulate-spy (npm)
The package xml-epsilon-double-emulate-spy was found to contain malicious code...
MAL-2025-46637 Malicious code in wind-decode-serialize-balance-xml (npm)
The package wind-decode-serialize-balance-xml was found to contain malicious code...
MAL-2025-46736 Malicious code in xml-epsilon-double-emulate-spy (npm)
The package xml-epsilon-double-emulate-spy was found to contain malicious code...
Malicious code in tachyon-vulcan-callisto-xml (npm)
The package tachyon-vulcan-callisto-xml was found to contain malicious code...