Security advisories

high2025-08-26

CVE-2025-71344-Picklescan is missing detection when calling built-in python ensurepip._run_pip

mmaitre314/picklescan · GHSA-xp4f-hrf8-rxw7

high2025-08-26

CVE-2025-52353-Badaso CMS file upload vulnerability

uasoft-indonesia/badaso · GHSA-gqp9-jh35-439m

medium2025-08-26

Picklescan is missing detection when calling pytorch function torch.utils.bottleneck.__main__.run_autograd_prof

mmaitre314/picklescan · GHSA-4whj-rm5r-c2v8

medium2025-08-26

GraphQL Armor Max-Depth Plugin Bypass via fragment caching

escape-technologies/graphql-armor · GHSA-224p-v68g-5g8f

medium2025-08-26

GraphQL Armor Max-Depth Plugin Bypass via Introspection Query Obfuscation

escape-technologies/graphql-armor · GHSA-hmfr-rx46-4jx2

medium2025-08-26

Picklescan has a missing detection when calling built-in python library idlelib.calltip.get_entity

mmaitre314/picklescan · GHSA-9xph-j2h6-g47v

high2025-08-26

CVE-2025-71361-Picklescan has a missing detection when calling built-in python idlelib.calltip.Calltip

mmaitre314/picklescan · GHSA-8r4j-24qv-fmq9

medium2025-08-26

Picklescan has a missing detection when calling built-in python code.InteractiveInterpreter

mmaitre314/picklescan · GHSA-cj3c-v495-4xqh

high2025-08-26

CVE-2025-71376-Picklescan has a missing detection when calling built-in python idlelib.autocomplete.AutoComplete.fetch_completions

mmaitre314/picklescan · GHSA-7cq8-mj8x-j263

high2025-08-26

CVE-2025-71358-Picklescan has a missing detection when calling built-in python idlelib.autocomplete.AutoComplete.get_entity

mmaitre314/picklescan · GHSA-6w4w-5w54-rjvr

high2025-08-26

CVE-2025-71354-Picklescan has a missing detection when calling built-in python idlelib.debugobj.ObjectTreeItem

mmaitre314/picklescan · GHSA-3vg9-h568-4w9m

medium2025-08-26

Picklescan has a missing detection when calling built-in python lib2to3.pgen2.grammar.Grammar.loads

mmaitre314/picklescan · GHSA-f54q-57x4-jg88

high2025-08-26

CVE-2025-71341-Picklescan has a missing detection when calling built-in python profile.Profile.runctx

mmaitre314/picklescan · GHSA-6vqj-c2q5-j97w

medium2025-08-26

Picklescan has a missing detection when calling built-in python profile.Profile.run

mmaitre314/picklescan · GHSA-x696-vm39-cp64

medium2025-08-26

Picklescan has a missing detection when calling built-in python trace.Trace.runctx

mmaitre314/picklescan · GHSA-g344-hcph-8vgg

medium2025-08-26

Picklescan has a missing detection when calling built-in python trace.Trace.run

mmaitre314/picklescan · GHSA-5qwp-399c-mjwf

high2025-08-26

CVE-2025-11058-xml2rfc has an arbitrary file read vulnerability

ietf-tools/xml2rfc · GHSA-cfmv-h8fx-85m7

medium2025-08-26

CVE-2025-57813-traQ Allows Insertion of Sensitive Information into Log File

traptitech/traq · GHSA-27r7-3m9x-r533

high2025-08-26

CVE-2025-57810-jsPDF Denial of Service (DoS)

parallax/jspdf · GHSA-8mvj-3j78-4qmw

high2025-08-26

CVE-2025-57803-ImageMagick (WriteBMPImage): 32-bit integer overflow when writing BMP scanline stride → heap buffer overflow

imagemagick/imagemagick · GHSA-mxvv-97wh-cfmm