Security advisories

medium2025-10-04

CVE-2025-43825-Liferay Portal exposes sensitive user data through its Freemarker template

liferay/liferay-portal · GHSA-rggc-gf6w-9q73

medium2025-10-03

CVE-2025-29192-Flowise Stored XSS vulnerability through logs in chatbot

flowiseai/flowise · GHSA-7r4h-vmj9-wg42

critical2025-10-03

CVE-2025-50538-Flowise is vulnerable to stored XSS via "View Messages" allows credential theft in FlowiseAI admin panel

flowiseai/flowise · GHSA-964p-j4gg-mhwc

medium2025-10-03

Flowise vulnerable to XSS

flowiseai/flowise · GHSA-4fr9-3x69-36wv

low2025-10-03

wrflib has a soundness issue and is unmaintained

cruise-automation/webviz-rust-framework · GHSA-466c-pfvv-v83g

medium2025-10-03

CVE-2025-53354-NiceGUI has a Reflected XSS

zauberzeug/nicegui · GHSA-8c95-hpq2-w46f

high2025-10-03

CVE-2025-59943-phpMyFAQ duplicate email registration allows multiple accounts with the same email

thorsten/phpmyfaq · GHSA-9wj2-4hcm-r74j

low2025-10-03

CVE-2025-59829-Claude Code permission deny bypass through symlink

anthropics/claude-code · GHSA-66m2-gx93-v996

high2025-10-03

CVE-2025-59536-Claude Code can execute commands prior to the startup trust dialog

anthropics/claude-code · GHSA-4fgq-fpq9-mr3g

high2025-10-02

CVE-2025-54286-Canonical LXD CSRF Vulnerability When Using Client Certificate Authentication with the LXD-UI

canonical/lxd · GHSA-p8hw-rfjg-689h

high2025-10-02

CVE-2025-54287-Canonical LXD Arbitrary File Read via Template Injection in Snapshot Patterns

canonical/lxd · GHSA-w2hg-2v4p-vmh6

medium2025-10-02

CVE-2025-54288-Canonical LXD Source Container Identification Vulnerability via cmdline Spoofing in devLXD Server

canonical/lxd · GHSA-7232-97c6-j525

high2025-10-02

CVE-2025-54289-Canonical LXD Vulnerable to Privilege Escalation via WebSocket Connection Hijacking in Operations API

canonical/lxd · GHSA-3g72-chj4-2228

medium2025-10-02

CVE-2025-54290-Canonical LXD Project Existence Determination Through Error Handling in Image Export Function

canonical/lxd · GHSA-p3x5-mvmp-5f35

high2025-10-02

CVE-2025-54293-Canonical LXD Path Traversal Vulnerability in Instance Log File Retrieval Function

canonical/lxd · GHSA-472f-vmf2-pr3h

medium2025-10-02

CVE-2025-54291-Canonical LXD Project Existence Determination Through Error Handling in Image Get Function

canonical/lxd · GHSA-xch9-h8qw-85c7

low2025-10-02

CVE-2025-61677-DataChain Vulnerable to Deserialization of Untrusted Data from Environment Variables

iterative/datachain · GHSA-6px8-mr29-cj4r

high2025-10-02

CVE-2025-61734-Apache Kylin Files or Directories Accessible to External Parties

apache/kylin · GHSA-p86w-w5rh-m3hx

high2025-10-02

CVE-2025-61733-Apache Kylin Authentication Bypass Vulnerability

apache/kylin · GHSA-mr9j-4j48-xcm2

high2025-10-02

CVE-2025-61735-Apache Kylin Server-Side Request Forgery (SSRF) Vulnerability

apache/kylin · GHSA-f6m8-qm7j-fh65