Security advisories

low2025-10-27

CVE-2025-62711-Wasmtime vulnerable to segfault when using component resources

bytecodealliance/wasmtime · GHSA-4h67-722j-5pmc

medium2025-10-27

CVE-2025-10282-BBOT's gitlab.py exposes globally configured "gitlab" API key

blacklanternsecurity/bbot · GHSA-p3v4-c93g-cmhw

medium2025-10-27

CVE-2025-62782-InventoryGui allows item duplication with experimental "Bundle" item in GUIs which use GuiStorageElement

phoenix616/inventorygui · GHSA-rgvh-4m82-fvjq

medium2025-10-27

CVE-2025-62783-InventoryGui affected by item duplication in GUIs which use GuiStorageElement

phoenix616/inventorygui · GHSA-598q-jw82-5w66

high2025-10-27

CVE-2025-55752-Apache Tomcat Vulnerable to Relative Path Traversal

apache/tomcat · GHSA-wmwf-9ccg-fff5

low2025-10-27

CVE-2025-55754-Apache Tomcat Vulnerable to Improper Neutralization of Escape, Meta, or Control Sequences

apache/tomcat · GHSA-vfww-5hm6-hx2j

low2025-10-27

CVE-2025-61795-Apache Tomcat Vulnerable to Improper Resource Shutdown or Release

apache/tomcat · GHSA-hgrr-935x-pq79

high2025-10-27

CVE-2025-58356-Constellation has insecure LUKS2 persistent storage partitions which may be opened and used

edgelesssys/constellation · GHSA-hq76-6gh2-5g4q

high2025-10-26

CVE-2025-8709-LangGraph's SQLite store implementation has a SQL Injection Vulnerability

langchain-ai/langgraph · GHSA-4h97-wpxp-3757

medium2025-10-25

CVE-2025-12194-Bouncy Castle Vulnerable to Uncontrolled Resource Consumption

bcgit/bc-lts-java · GHSA-jv6h-4262-q663

medium2025-10-24

CVE-2025-71381-Hono vulnerable to Vary Header Injection leading to potential CORS Bypass

honojs/hono · GHSA-q7jf-gf43-6x6p

medium2025-10-24

CVE-2024-58269-Rancher exposes sensitive information through audit logs

rancher/rancher · GHSA-mw39-9qc2-f7mg

critical2025-10-24

CVE-2025-62714-Karmada Dashboard API Unauthorized Access Vulnerability

karmada-io/dashboard · GHSA-5qjg-9mjh-4r92

medium2025-10-24

CVE-2023-32199-Rancher user retains access to clusters despite Global Role removal

rancher/rancher · GHSA-j4vr-pcmw-hx59

medium2025-10-24

CVE-2025-62254-Liferay Portal ComboServlet denial of service via large file combination

liferay/liferay-portal · GHSA-q95h-87j6-273x

high2025-10-23

CVE-2025-12044-Hashicorp Vault and Vault Enterprise vulnerable to a denial of service when processing JSON

hashicorp/vault · GHSA-vp5w-xcfc-73wf

medium2025-10-23

CVE-2025-60837-MCMS reflected cross-site scripting (XSS) vulnerability

ming-soft/mcms · GHSA-wvv5-5g6x-hp7j

low2025-10-23

CVE-2025-62255-Liferay Portal Self Cross-site scripting (XSS) vulnerability on the edit Knowledge Base article page

liferay/liferay-portal · GHSA-gccf-r9xp-x8jx

high2025-10-23

CVE-2025-11621-HashiCorp Vault and Vault Enterprise's AWS Auth method may be susceptible to authentication bypass

hashicorp/vault · GHSA-9g4h-h484-3578

medium2025-10-23

CVE-2025-62517-rollbar vulnerable to Prototype Pollution in merge()

rollbar/rollbar.js · GHSA-xcg2-9pp4-j82x