Security advisories

medium2025-08-23

CVE-2025-43766-Liferay Portal allows unrestricted upload of file in the style books component

liferay/liferay-portal · GHSA-mf9q-87xx-jgvv

medium2025-08-23

CVE-2025-43765-Liferay Portal stored cross-site scripting in text field of the web content structure

liferay/liferay-portal · GHSA-h8gx-4hhm-w45v

medium2025-08-23

CVE-2025-43767-Liferay Portal allows open redirect in /c/portal/edit_info_item parameter redirect

liferay/liferay-portal · GHSA-6hj4-v2qp-cqr2

medium2025-08-23

CVE-2025-43764-Liferay Portal ReDoS with Role Name search in KaleoDesignerPortlet

liferay/liferay-portal · GHSA-23w4-rpc6-wpcc

medium2025-08-23

CVE-2025-43769-Liferay Portal vulnerable to Stored XSS in Components portlet

liferay/liferay-portal · GHSA-rvmf-jw8g-r35r

medium2025-08-23

CVE-2025-43770-Liferay Portal vulnerable to Reflected XSS with the referer and forward parameter

liferay/liferay-portal · GHSA-h4m4-xp33-37mj

medium2025-08-23

CVE-2025-43768-Liferay Portal JSONWS API endpoint shares sensitive information

liferay/liferay-portal · GHSA-cv9j-mg9w-v7wm

medium2025-08-22

CVE-2025-43759-Liferay Portal users are able to add system admin portlets to pages

liferay/liferay-portal · GHSA-w3cr-3xw2-rp78

medium2025-08-22

CVE-2025-43758-Liferay Portal's unauthenticated users can access loaded files via URL before submitting the object entry

liferay/liferay-portal · GHSA-mm62-gwj5-j285

medium2025-08-22

CVE-2025-43762-Liferay Portal users can upload an unlimited amount of files

liferay/liferay-portal · GHSA-84pp-qr92-95c9

medium2025-08-22

CVE-2025-43761-Liferay Portal Reflected XSS in CKeditor 4.21.0 endpoint

liferay/liferay-portal · GHSA-3h7r-4xxj-3mfm

high2025-08-22

CVE-2025-57801-gnark is vulnerable to signature malleability in EdDSA and ECDSA due to missing scalar checks

consensys/gnark · GHSA-95v9-hv42-pwrj

medium2025-08-22

CVE-2025-43760-Liferay Portal Reflected Cross-Site Scripting Vulnerability via PortalUtil.escapeRedirect

liferay/liferay-portal · GHSA-fvqv-593q-qp8r

medium2025-08-22

CVE-2025-43751-Liferay Portal User Enumeration Vulnerability via the Create Account Page

liferay/liferay-portal · GHSA-xwc5-q44v-p6gg

low2025-08-22

Rust XCB `xcb::Connection::connect_to_fd*` functions violate I/O safety

rust-x-bindings/rust-xcb · GHSA-655h-hg88-5qmf

high2025-08-22

CVE-2025-71348-Picklescan is missing detection when calling pytorch function torch.utils._config_module.load_config

mmaitre314/picklescan · GHSA-vv6j-3g6g-2pvj

high2025-08-22

CVE-2025-71370-Picklescan missing detection when calling pytorch function torch.jit.unsupported_tensor_ops.execWrapper

mmaitre314/picklescan · GHSA-vr7h-p6mm-wpmh

medium2025-08-22

Picklescan missing detection when calling pytorch function torch.utils.data.datapipes.utils.decoder.basichandlers

mmaitre314/picklescan · GHSA-h3qp-7fh3-f8h4

medium2025-08-22

Picklescan missing detection when calling pytorch function torch.utils.collect_env.run

mmaitre314/picklescan · GHSA-f745-w6jp-hpxx

medium2025-08-22

Picklescan missing detection when calling pytorch function torch.fx.experimental.symbolic_shapes.ShapeEnv.evaluate_guards_expression

mmaitre314/picklescan · GHSA-f4x7-rfwp-v3xw