MAL-2025-15206 Malicious code in avior-stop-xml-version (npm)

The package avior-stop-xml-version was found to contain malicious code...

Malicious code in body-parse-xml (npm)

The package body-parse-xml was found to contain malicious code...

Malicious code in xml-apollo-writable-heka (npm)

The package xml-apollo-writable-heka was found to contain malicious code...

Malicious code in quick-old-grep-virtualize-xml (npm)

The package quick-old-grep-virtualize-xml was found to contain malicious code...

Malicious code in umbriel-triton-prettier-plugin-markdown-xml (npm)

The package umbriel-triton-prettier-plugin-markdown-xml was found to contain malicious code...

Malicious code in cors-convict-xml-paleoclimatology (npm)

The package cors-convict-xml-paleoclimatology was found to contain malicious code...

MAL-2025-33327 Malicious code in sisyphe-xml (npm)

The package sisyphe-xml was found to contain malicious code...

MAL-2025-17422 Malicious code in commitlint-unuk-cypress-xml (npm)

The package commitlint-unuk-cypress-xml was found to contain malicious code...

Malicious code in cache-omega-socket-decrypt-xml (npm)

The package cache-omega-socket-decrypt-xml was found to contain malicious code...

Malicious code in node-earth-static-reject-xml (npm)

The package node-earth-static-reject-xml was found to contain malicious code...

Malicious code in mutation-xml-hologram-andromeda (npm)

The package mutation-xml-hologram-andromeda was found to contain malicious code...

MAL-2025-39880 Malicious code in xml-warp-magellan-mira (npm)

The package xml-warp-magellan-mira was found to contain malicious code...

MAL-2025-16423 Malicious code in cache-omega-socket-decrypt-xml (npm)

The package cache-omega-socket-decrypt-xml was found to contain malicious code...

MAL-2025-27303 Malicious code in nestjs-betelgeuse-xml-polaris (npm)

The package nestjs-betelgeuse-xml-polaris was found to contain malicious code...

MAL-2025-17611 Malicious code in cosmiconfig-xml-xenon-lint (npm)

The package cosmiconfig-xml-xenon-lint was found to contain malicious code...

MAL-2025-33087 Malicious code in shelljs-uglify-js-nova-xml (npm)

The package shelljs-uglify-js-nova-xml was found to contain malicious code...

CVE-2025-26484

Dell CloudLink, versions 8.0 through 8.1.1, contains an Improper Restriction of XML External Entity Reference vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Denial of service...

CVE-2025-26484

Dell CloudLink, versions 8.0 through 8.1.1, contains an Improper Restriction of XML External Entity Reference vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Denial of service...

libexpat: expat: Improper Restriction of XML Entity Expansion Depth in libexpat

A stack overflow vulnerability exists in the libexpat library due to the way it handles recursive entity expansion in XML documents. When parsing an XML document with deeply nested entity references, libexpat can be forced to recurse indefinitely, exhausting the stack space and causing a crash...

CVE-2025-49887

Improper Control of Generation of Code 'Code Injection' vulnerability in WPFactory Product XML Feed Manager for WooCommerce product-xml-feeds-for-woocommerce allows Remote Code Inclusion.This issue affects Product XML Feed Manager for WooCommerce: from n/a through = 2.9.3...