Security advisories

medium2025-08-28

CVE-2025-57756-Contao discloses sensitive information in the front end search index

contao/contao · GHSA-2xmj-8wmq-7475

medium2025-08-28

CVE-2025-57758-Contao applies improper access control in the back end voters

contao/contao · GHSA-7m47-r75r-cx8v

medium2025-08-28

CVE-2024-48908-lychee link checking action affected by arbitrary code injection in composite action

lycheeverse/lychee-action · GHSA-65rg-554r-9j5x

critical2025-08-28

CVE-2025-8077-NeuVector admin account has insecure default password

neuvector/neuvector · GHSA-8pxw-9c75-6w56

medium2025-08-28

CVE-2025-54467-NeuVector process with sensitive arguments lead to leakage

neuvector/neuvector · GHSA-w54x-xfxg-4gxq

medium2025-08-28

CVE-2025-53884-NeuVector has an insecure password storage and is vulnerable to rainbow attack

neuvector/neuvector · GHSA-8ff6-pc43-jwv3

high2025-08-27

CVE-2025-50979-NodeBB SQL Injection vulnerability

nodebb/nodebb · GHSA-rfh2-8vxq-jqr8

high2025-08-27

CVE-2025-51667-simple-admin-core SQL Injection vulnerability

suyuan32/simple-admin-core · GHSA-f2m2-4q6r-cwc4

medium2025-08-27

CVE-2025-5187-Kubernetes Nodes can delete themselves by adding an OwnerReference

kubernetes/kubernetes · GHSA-4x4m-3c2p-qppc

medium2025-08-27

CVE-2025-57821-Google Sign-In for Rails allowed redirects to malformed URLs

basecamp/google_sign_in · GHSA-7pwc-wh6m-44q3

critical2025-08-27

CVE-2025-52122-The Freeform CraftCMS plugin contains an Server-side template injection (SSTI) vulnerability

solspace/craft-freeform · GHSA-9hp3-f5g8-rccg

high2025-08-26

CVE-2025-57820-devalue prototype pollution vulnerability

sveltejs/devalue · GHSA-vj54-72f3-p5jv

medium2025-08-26

Picklescan is missing detection when calling built-in python library asyncio.unix_events._UnixSubprocessTransport._start

mmaitre314/picklescan · GHSA-q77w-mwjj-7mqx

medium2025-08-26

Picklescan is missing detection when calling built-in python cProfile.run

mmaitre314/picklescan · GHSA-49gj-c84q-6qm9

medium2025-08-26

CVE-2025-71378-Picklescan is missing detection when calling built-in Python cProfile.runctx

mmaitre314/picklescan · GHSA-9w88-8rmg-7g2p

medium2025-08-26

Picklescan is missing detection when calling built-in python doctest.debug_script

mmaitre314/picklescan · GHSA-fqq6-7vqf-w3fg

high2025-08-26

CVE-2025-71340-Picklescan is missing detection when calling built-in python idlelib.pyshell.ModifiedInterpreter.runcode

mmaitre314/picklescan · GHSA-3gf5-cxq9-w223

high2025-08-26

CVE-2025-71357-Picklescan is missing detection when calling built-in python idlelib.pyshell.ModifiedInterpreter.runcommand

mmaitre314/picklescan · GHSA-j343-8v2j-ff7w

medium2025-08-26

Picklescan is missing detection when calling built-in python idlelib.run.Executive.runcode

mmaitre314/picklescan · GHSA-m869-42cg-3xwr

medium2025-08-26

Picklescan is missing detection when calling built-in python lib2to3.pgen2.pgen.ParserGenerator.make_label

mmaitre314/picklescan · GHSA-p9w7-82w4-7q8m