Security advisories

medium2025-08-22

Picklescan missing detection when calling pytorch function torch._dynamo.guards.GuardBuilder.get

mmaitre314/picklescan · GHSA-86cj-95qr-2p4f

medium2025-08-22

Picklescan missing detection when calling pytorch function torch.utils.bottleneck.__main__.run_cprofile

mmaitre314/picklescan · GHSA-4r9r-ch6f-vxmx

low2025-08-22

CVE-2025-55745-UnoPim has CSV Injection on Quick Export feature

unopim/unopim · GHSA-74rg-6f92-g6wx

high2025-08-22

CVE-2025-55741-UnoPim has Broken Access Control

unopim/unopim · GHSA-8p2f-fx4q-75cx

medium2025-08-22

CVE-2025-53363-Dpanel has an arbitrary file read vulnerability

donknap/dpanel · GHSA-gcqf-pxgg-gw8q

medium2025-08-22

CVE-2025-51825-JeecgBoot SQL Injection Vulnerability

jeecgboot/jeecgboot · GHSA-gj8w-ffq9-6828

low2025-08-22

CVE-2025-9340-Bouncy Castle for Java has Out-of-Bounds Write Vulnerability

bcgit/bc-java · GHSA-g6rx-6wfx-gj74

medium2025-08-22

CVE-2025-9341-Bouncy Castle for Java has Uncontrolled Resource Consumption Vulnerability

bcgit/bc-java · GHSA-jfcv-jv9g-2vx2

medium2025-08-22

CVE-2025-43752-Liferay Portal's Unlimited File Upload Could Result in DoS

liferay/liferay-portal · GHSA-qpp6-f3qj-rggq

low2025-08-22

CVE-2025-43753-Liferay Portal Reflected Cross-Site Scripting Vulnerability via Form Container

liferay/liferay-portal · GHSA-r367-q549-pgr5

high2025-08-21

CVE-2025-51606-hippo4j Includes Hard Coded Secret Key in JWT Creation

opengoofy/hippo4j · GHSA-48cg-9c55-j2q7

high2025-08-21

CVE-2025-57751-Denial-of-Service attack in pyLoad CNL Blueprint using dukpy.evaljs

pyload/pyload · GHSA-9gjj-6gj7-c4wj

medium2025-08-21

CVE-2025-43754-Liferay Portal Username Enumeration Vulnerability

liferay/liferay-portal · GHSA-x7p4-v8mj-6fxx

medium2025-08-21

CVE-2025-6465-Mattermost Fails to Sanitize File Names

mattermost/mattermost · GHSA-pj6f-rc94-gw53

medium2025-08-21

CVE-2025-8402-Mattermost has Potential Server Crash due to Unvalidated Import Data

mattermost/mattermost · GHSA-h469-4fcf-p23h

medium2025-08-21

CVE-2025-43756-Liferay Portal Reflected Cross-Site Scripting Vulnerability via snippet Parameter

liferay/liferay-portal · GHSA-q2gv-w583-f2vq

medium2025-08-21

CVE-2025-43755-Liferay Portal Stored Cross-Site Scripting Vulnerability via GroupPagesPortlet_type Parameter

liferay/liferay-portal · GHSA-58cq-8wm2-6m87

high2025-08-21

CVE-2025-57755-@musistudio/claude-code-router has improper CORS configuration

musistudio/claude-code-router · GHSA-8hmm-4crw-vm2c

medium2025-08-21

CVE-2025-57753-vite-plugin-static-copy files not included in `src` are possible to access with a crafted request

sapphi-red/vite-plugin-static-copy · GHSA-pp7p-q8fx-2968

critical2025-08-21

CVE-2025-9288-sha.js is missing type checks leading to hash rewind and passing on crafted data

browserify/sha.js · GHSA-95m3-7q98-8xr5