Security advisories

medium2025-08-12

CVE-2025-49558-Magento Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability

magento/magento2 · GHSA-wcmw-8xpp-rwfj

medium2025-08-12

CVE-2025-49559-Magento vulnerable to path traversal

magento/magento2 · GHSA-h4f4-gv6h-x824

high2025-08-12

CVE-2025-49556-Magento has incorrect authorization issue that leads to arbitrary file system read

magento/magento2 · GHSA-7hrj-3c9x-xv5h

high2025-08-12

CVE-2025-49555-Magento Cross-Site Request Forgery (CSRF) vulnerability

magento/magento2 · GHSA-5777-jj7p-mpqw

high2025-08-12

CVE-2025-55164-content-security-policy-parser Prototype Pollution Vulnerability May Lead to RCE

helmetjs/content-security-policy-parser · GHSA-w2cq-g8g3-gm83

medium2025-08-12

CVE-2025-43735-Liferay Portal and Liferay DXP have a reflected cross-site scripting vulnerability

liferay/liferay-portal · GHSA-222w-xmc5-jhp3

medium2025-08-12

CVE-2025-43736-Liferay Portal and Liferay DXP have a Denial Of Service via File Upload (DOS) vulnerability

liferay/liferay-portal · GHSA-cg99-m88x-422c

medium2025-08-12

CVE-2025-8885-Bouncy Castle for Java on All (API modules) allows Excessive Allocation

bcgit/bc-java · GHSA-67mf-3cr5-8w23

medium2025-08-12

CVE-2025-55152-Oak Server has ReDoS in x-forwarded-proto and x-forwarded-for headers

oakserver/oak · GHSA-r3v7-pc4g-7xp9

high2025-08-12

CVE-2025-71325-Picklescan has pickle parsing logic flaw that leads to malicious pickle file bypass

mmaitre314/picklescan · GHSA-9gvj-pp9x-gcfr

high2025-08-12

CVE-2025-55156-PyLoad vulnerable to SQL Injection via API /json/add_package in add_links parameter

pyload/pyload · GHSA-pwh4-6r3m-j2rf

high2025-08-12

Komari vulnerable to 2FA Authentication Bypass

komari-monitor/komari · GHSA-jhmr-57cj-q6g9

high2025-08-12

Komari vulnerable to Cross-site WebSocket Hijacking

komari-monitor/komari · GHSA-q355-h244-969h

low2025-08-12

HFS user adding a "web link" in HFS is vulnerable to "target=_blank" exploit

rejetto/hfs · GHSA-xcxh-6cv4-q8p8

low2025-08-11

Litestar has potential log injection in exception logging

litestar-org/litestar · GHSA-674p-xv2x-rf3g

medium2025-08-11

CVE-2025-55159-slab allows out-of-bounds access in `get_disjoint_mut` due to incorrect bounds check

tokio-rs/slab · GHSA-qx2v-8332-m4fv

medium2025-08-11

CVE-2025-53514-Mattermost Confluence Plugin has Improper Check for Unusual or Exceptional Conditions

mattermost/mattermost-plugin-confluence · GHSA-w92j-c6gr-hj8r

high2025-08-11

CVE-2025-52931-Mattermost Confluence Plugin has Improper Check for Unusual or Exceptional Conditions

mattermost/mattermost-plugin-confluence · GHSA-vc77-c2hx-h5x2

medium2025-08-11

CVE-2025-53910-Mattermost Confluence Plugin has Missing Authorization vulnerability

mattermost/mattermost-plugin-confluence · GHSA-v6c8-g53h-mc2h

medium2025-08-11

CVE-2025-8285-Mattermost Confluence Plugin has Missing Authorization vulnerability

mattermost/mattermost-plugin-confluence · GHSA-qjrx-j8wm-xf83