Security advisories

medium2025-10-28

CVE-2025-11375-Consul event endpoint is vulnerable to denial of service

hashicorp/consul · GHSA-qh7p-pfq3-677h

medium2025-10-28

CVE-2025-11374-Consul key/value endpoint is vulnerable to denial of service

hashicorp/consul · GHSA-7g3r-8c6v-hfmr

high2025-10-28

CVE-2025-62727-Starlette vulnerable to O(n^2) DoS via Range header merging in ``starlette.responses.FileResponse``

kludex/starlette · GHSA-7f5h-v6xp-fcq8

medium2025-10-28

CVE-2025-62796-PrivateBin is missing HTML sanitization of attached filename in file size hint

privatebin/privatebin · GHSA-867c-p784-5q6g

medium2025-10-28

Contrast has insecure LUKS2 persistent storage partitions may be opened and used

edgelesssys/contrast · GHSA-f5p4-p5q5-jv3h

medium2025-10-28

CVE-2025-62784-InventoryGui allows item duplication in GUIs which use GuiStorageElement

phoenix616/inventorygui · GHSA-7whh-79j3-7c55

high2025-10-28

CVE-2025-59837-Astro's bypass of image proxy domain validation leads to SSRF and potential XSS

withastro/astro · GHSA-qcpr-679q-rhm2

medium2025-10-28

CVE-2025-27093-Silver has unrestricted traffic between Wireguard clients

bishopfox/sliver · GHSA-q8j9-34qf-7vq7

medium2025-10-28

CVE-2025-12390-Keycloak vulnerable to session takeovers due to reuse of session identifiers

keycloak/keycloak · GHSA-rg35-5v25-mqvp

medium2025-10-28

CVE-2025-62171-ImageMagick has Integer Overflow in BMP Decoder (ReadBMP)

imagemagick/imagemagick · GHSA-9pp9-cfwx-54rm

high2025-10-28

CVE-2025-62260-Liferay Portal Vulnerable to DoS via Crafted Headless API Request

liferay/liferay-portal · GHSA-vgqx-447m-wvcj

medium2025-10-28

CVE-2025-62259-Liferay Portal Does Not Limit Access to APIs Before Email Verification

liferay/liferay-portal · GHSA-gv7w-jh8g-vr73

high2025-10-28

CVE-2025-62258-Liferay Portal Vulnerable to CSRF in Headless APIs

liferay/liferay-portal · GHSA-gh4w-8qgq-8w9r

medium2025-10-28

CVE-2025-62261-Liferay Portal Stores Password Reset Tokens in Plain Text

liferay/liferay-portal · GHSA-xcj6-xpjg-c4xr

medium2025-10-27

CVE-2025-62594-ImageMagick CLAHE : Unsigned underflow and division-by-zero lead to OOB pointer arithmetic and process crash (DoS)

imagemagick/imagemagick · GHSA-wpp4-vqfq-v4hp

medium2025-10-27

CVE-2025-62262-Liferay Portal Vulnerable to Information Exposure Through a Log File Vulnerability in LDAP Import Feature

liferay/liferay-portal · GHSA-cw79-fq4f-9r96

medium2025-10-27

CVE-2025-62263-Liferay Portal Vulnerable to Cross-Site Scripting

liferay/liferay-portal · GHSA-8mgf-rgg5-w38q

medium2025-10-27

CVE-2025-62253-Liferay Portal Vulnerable to Open Redirect via the _com_liferay_layout_admin_web_portlet_GroupPagesPortlet_redirect parameter

liferay/liferay-portal · GHSA-2pwh-9q9q-5r9c

high2025-10-27

CVE-2025-11419-Keycloak TLS Client-Initiated Renegotiation Denial of Service

keycloak/keycloak · GHSA-q8hq-4h99-fj7x

high2025-10-27

CVE-2025-62725-Docker Compose Vulnerable to Path Traversal via OCI Artifact Layer Annotations

docker/compose · GHSA-gv8h-7v7w-r22q