Security advisories

medium2025-08-19

CVE-2025-55303-Astro allows unauthorized third-party images in _image endpoint

withastro/astro · GHSA-xf8x-j4p2-f749

critical2025-08-19

HydrAIDE Authentication Bypass Vulnerability

hydraide/hydraide · GHSA-qp7j-x725-g67f

high2025-08-19

CVE-2025-52478-Stored XSS in n8n Form Trigger allows Account Takeover via injected iframe and video/source

n8n-io/n8n · GHSA-hfmv-hhh3-43f2

medium2025-08-19

CVE-2025-51488-moonshine Stored Cross-Site Scripting Vulnerability in Create Admin

moonshine-software/moonshine · GHSA-rh9f-gr6q-mpc4

medium2025-08-19

CVE-2025-51487-moonshine Stored Cross-Site Scripting Vulnerability in Create Article

moonshine-software/moonshine · GHSA-p632-58pp-c9xg

medium2025-08-19

CVE-2025-51510-MoonShine SQL Injection Vulnerability

moonshine-software/moonshine · GHSA-9g9j-3w64-3cjh

medium2025-08-19

CVE-2025-51489-MoonShine Arbitrary File Upload Vulnerability

moonshine-software/moonshine · GHSA-8xfq-7f6m-mpmf

medium2025-08-19

CVE-2025-43739-Liferay Portal Email Modification Vulnerability via Calendar Portlet

liferay/liferay-portal · GHSA-7mxq-h2r7-h449

medium2025-08-19

CVE-2025-43740-Liferay Portal has Stored Cross-Site Scripting Vulnerability via Message Boards Feature

liferay/liferay-portal · GHSA-22jp-w3cg-gvmm

medium2025-08-18

CVE-2025-55296-LibreNMS allows stored XSS in Alert Template name field

librenms/librenms · GHSA-vxq6-8cwm-wj99

medium2025-08-18

CVE-2025-43731-Liferay Portal Vulnerable to Cross-Site Scripting

liferay/liferay-portal · GHSA-3p2m-574v-v257

medium2025-08-18

CVE-2025-55214-Copier's safe template has filesystem write access outside destination path

copier-org/copier · GHSA-p7q8-grrj-3m8w

medium2025-08-18

CVE-2025-55213-OpenFGA Authorization Bypass

openfga/openfga · GHSA-mgh9-4mwp-fg55

critical2025-08-18

CVE-2025-55205-Capsule tenant owners with "patch namespace" permission can hijack system namespaces label

projectcapsule/capsule · GHSA-fcpm-6mxq-m5vv

high2025-08-18

CVE-2025-55201-Copier's safe template has arbitrary filesystem read/write access

copier-org/copier · GHSA-3xw7-v6cj-5q8h

high2025-08-18

CVE-2025-55284-Claude Code's Permissive Default Allowlist Enables Unauthorized File Read and Network Exfiltration in Claude Code

anthropics/claude-code · GHSA-x5gv-jw7f-j6xj

low2025-08-18

CVE-2025-3639-Liferay Portal Login Bypass Vulnerability

liferay/liferay-portal · GHSA-g4wg-mpfg-x2q6

low2025-08-18

CVE-2025-43733-Liferay Portal Vulnerable to Cross-Site Scripting

liferay/liferay-portal · GHSA-vhcr-hgc8-29qr

medium2025-08-18

CVE-2025-43732-Liferay Portal Vulnerable to Insecure Direct Object Reference

liferay/liferay-portal · GHSA-v6xr-v2qg-h22h

medium2025-08-18

IdMap from_iter may lead to uninitialized memory being freed on drop

andrewhickman/id-map · GHSA-qq4c-hm99-979m