Security advisories

high2025-11-13

Amazon Web Services Advanced JDBC Wrapper: Privilege Escalation in Aurora PostgreSQL instance

aws/aws-advanced-jdbc-wrapper · GHSA-7xw4-g7mm-r4hh

high2025-11-13

CVE-2025-12967-AWS Advanced Python Wrapper: Privilege Escalation in Aurora PostgreSQL instance

aws/aws-advanced-python-wrapper · GHSA-4jvf-wx3f-2x8q

low2025-11-13

CVE-2025-11777-Mattermost Incorrect Authorization vulnerability

mattermost/mattermost · GHSA-mqcj-8c2g-h97q

high2025-11-13

CVE-2025-64507-Incus vulnerable to local privilege escalation through custom storage volumes

lxc/incus · GHSA-56mx-8g9f-5crf

critical2025-11-13

CVE-2025-64513-Milvus Proxy has a Critical Authentication Bypass Vulnerability

milvus-io/milvus · GHSA-mhjq-8c7m-3f7p

medium2025-11-13

CVE-2025-64517-sudo-rs doesn't record authenticating user properly in timestamp

trifectatechfoundation/sudo-rs · GHSA-q428-6v73-fc4q

critical2025-11-13

CVE-2025-12762-pgAdmin4 vulnerable to Remote Code Execution (RCE) when running in server mode

pgadmin-org/pgadmin4 · GHSA-w2p4-p4rh-qcm3

medium2025-11-13

CVE-2025-12763-pgAdmin 4 has command injection vulnerability on Windows systems

pgadmin-org/pgadmin4 · GHSA-rm79-x4g6-hvg5

high2025-11-13

CVE-2025-12765-pgAdmin has vulnerability in LDAP authentication mechanism that allows bypassing TLS certificate verification

pgadmin-org/pgadmin4 · GHSA-g4r8-3qmh-pmch

high2025-11-13

CVE-2025-12764-pgAdmin is affected by an LDAP injection vulnerability

pgadmin-org/pgadmin4 · GHSA-cvf4-f829-762v

high2025-11-13

CVE-2025-64509-Bugsink is vulnerable to unauthenticated remote DoS via crafted Brotli input (via CPU)

bugsink/bugsink · GHSA-rrx3-2x4g-mq2h

high2025-11-13

CVE-2025-64508-Bugsink is vulnerable to unauthenticated remote DoS via crafted Brotli input

bugsink/bugsink · GHSA-fc2v-vcwj-269v

medium2025-11-13

CVE-2025-64502-Parse Server allows public `explain` queries which may expose sensitive database performance information and schema details

parse-community/parse-server · GHSA-7cx5-254x-cgrq

high2025-11-12

CVE-2025-64500-Symfony's incorrect parsing of PATH_INFO can lead to limited authorization bypass

symfony/symfony · GHSA-3rg7-wf37-54rm

high2025-11-12

CVE-2025-64186-Evervault Go SDK: Incomplete PCR Validation in Enclave Attestation for non-Evervault hosted Enclaves

evervault/evervault-go · GHSA-88h9-77c7-p6w4

high2025-11-12

CVE-2025-64484-OAuth2-Proxy is vulnerable to header smuggling via underscore leading to potential privilege escalation

oauth2-proxy/oauth2-proxy · GHSA-vjrc-mh2v-45x6

low2025-11-12

CVE-2025-64345-Wasmtime provides unsound API access to a WebAssembly shared linear memory

bytecodealliance/wasmtime · GHSA-hc7m-r6v8-hg9q

low2025-11-12

CVE-2025-64170-sudo-rs: Partial password reveal is possible after timeout

trifectatechfoundation/sudo-rs · GHSA-c978-wq47-pvvw

high2025-11-12

CVE-2025-64099-OpenAM: Using arbitrary OIDC requested claims values in id_token and user_info is allowed

openidentityplatform/openam · GHSA-39hr-239p-fhqc

low2025-11-12

CVE-2025-62780-changedetection.io: Stored XSS in Watch update via API

dgtlmoon/changedetection.io · GHSA-4c3j-3h7v-22q9