The `validate` function exposed by the csaf-validator-lib executes arbitrary functions that a caller passes via arguments. These functions are not restricted to a trusted and predefined set of functions to validate CSAF documents, but can run arbitrary code.

An high privileged attacker may pass crafted arguments to the validate function of csaf-validator-lib of a locally installed Secvisogram in versions < 0.1.0 wich can result in arbitrary code execution and DoS once the users triggers the validation.

An high privileged attacker may pass crafted arguments to the validate function of csaf-validator-lib of a locally installed Secvisogram in versions < 0.1.0 wich can result in arbitrary code execution and DoS once the users triggers the validation.