Security advisories

high2025-08-26

CVE-2025-55298-ImageMagick has a Format String Bug in InterpretImageFilename leads to arbitrary code execution

imagemagick/imagemagick · GHSA-9ccg-6pjw-x645

low2025-08-26

CVE-2025-55212-ImageMagick affected by divide-by-zero in ThumbnailImage via montage -geometry ":" leads to crash

imagemagick/imagemagick · GHSA-fh55-q5pj-pxgw

medium2025-08-26

CVE-2025-50383-Easy!Appointments SQL injection vulnerability

alextselegidis/easyappointments · GHSA-2f28-69j7-85hf

high2025-08-26

CVE-2025-5302-LlamaIndex affected by a Denial of Service (DOS) in JSONReader

run-llama/llama_index · GHSA-7753-xrfw-ch36

medium2025-08-25

CVE-2025-57814-request-filtering-agent SSRF Bypass via HTTPS Requests to 127.0.0.1

azu/request-filtering-agent · GHSA-pw25-c82r-75mm

medium2025-08-25

mitmproxy binaries embed a vulnerable python-hyper/h2 dependency

mitmproxy/mitmproxy · GHSA-63cx-g855-hvv4

medium2025-08-25

CVE-2025-57804-h2 allows HTTP Request Smuggling due to illegal characters in headers

python-hyper/h2 · GHSA-847f-9342-265h

high2025-08-25

CVE-2025-57809-XGrammar affected by Denial of Service by infinite recursion grammars

mlc-ai/xgrammar · GHSA-5cmr-4px5-23pc

medium2025-08-25

CVE-2025-57811-Craft CMS Potential Remote Code Execution via Twig SSTI

craftcms/cms · GHSA-crcq-738g-pqvc

medium2025-08-25

CVE-2025-55160-ImageMagick has Undefined Behavior (function-type-mismatch) in CloneSplayTree

imagemagick/imagemagick · GHSA-6hgw-6x87-578x

high2025-08-25

CVE-2025-55154-imagemagick: integer overflows in MNG magnification

imagemagick/imagemagick · GHSA-qp29-wxp5-wh82

high2025-08-25

CVE-2025-57760-Langflow Vulnerable to Privilege Escalation via CLI Superuser Creation (Post-RCE)

langflow-ai/langflow · GHSA-4gv9-mp8m-592r

high2025-08-25

CVE-2025-55004-imagemagick: heap-buffer overflow read in MNG magnification with alpha

imagemagick/imagemagick · GHSA-cjc8-g9w8-chfw

low2025-08-25

CVE-2025-68469-ImageMagick has a heap-buffer-overflow

imagemagick/imagemagick · GHSA-fff3-4rp7-px97

low2025-08-25

CVE-2025-53019-ImageMagick has a Memory Leak in magick stream

imagemagick/imagemagick · GHSA-cfh4-9f7v-fhrc

low2025-08-25

CVE-2025-53014-ImageMagick has a Heap Buffer Overflow in InterpretImageFilename

imagemagick/imagemagick · GHSA-hm4x-r5hc-794f

high2025-08-25

CVE-2025-53101-ImageMagick has a Stack Buffer Overflow in image.c

imagemagick/imagemagick · GHSA-qh3h-j545-h8c9

high2025-08-25

CVE-2025-43960-Adminer PHP Object Injection issue leads to Denial of Service

vrana/adminer · GHSA-mqh4-2mm8-g7w9

high2025-08-25

CVE-2025-26467-Apache Cassandra: User with MODIFY permission on ALL KEYSPACES can escalate privileges to superuser via unsafe actions (4.0.16 only)

apache/cassandra · GHSA-5c4f-pxmx-xcm4

high2025-08-25

CVE-2025-54370-PhpSpreadsheet vulnerable to SSRF when reading and displaying a processed HTML document in the browser

phpoffice/phpspreadsheet · GHSA-rx7m-68vc-ppxh