Security advisories

high2025-08-04

CVE-2025-54794-Claude Code Research Preview has a Path Restriction Bypass which could allow unauthorized file access

anthropics/claude-code · GHSA-pmw4-pwvc-3hx2

critical2025-08-04

CVE-2025-54119-The ADOdb sqlite3 driver allows SQL injection

adodb/adodb · GHSA-vf2r-cxg9-p7rf

medium2025-08-04

CVE-2025-54387-IPX Allows Path Traversal via Prefix Matching Bypass

unjs/ipx · GHSA-mm3p-j368-7jcr

medium2025-08-04

CVE-2025-8341-Grafana Infinity Datasource Plugin SSRF Vulnerability

grafana/grafana-infinity-datasource · GHSA-3c93-92r7-j934

medium2025-08-03

CVE-2024-51775-Apache Zeppelin: Missing Origin Validation in WebSockets vulnerability

apache/zeppelin · GHSA-xg8j-j6vp-6h5w

medium2025-08-03

CVE-2024-41177-Apache Zeppelin: XSS in the Helium module

apache/zeppelin · GHSA-p288-459w-jxj6

medium2025-08-03

CVE-2024-52279-Apache Zeppelin: Arbitrary file read by adding malicious JDBC connection string

apache/zeppelin · GHSA-jr43-q92q-5q82

critical2025-08-01

CVE-2025-54782-@nestjs/devtools-integration: CSRF to Sandbox Escape Allows for RCE against JS Developers

nestjs/nest · GHSA-85cg-cmq5-qjm7

medium2025-08-01

CVE-2025-6015-Hashicorp Vault has Login MFA Rate Limit Bypass Vulnerability

hashicorp/vault · GHSA-v6r4-35f9-9rpw

medium2025-08-01

CVE-2025-6014-Hashicorp Vault's TOTP Secrets Engine Susceptible to Code Reuse

hashicorp/vault · GHSA-qv3p-fmv3-9hww

medium2025-08-01

CVE-2025-6004-Hashicorp Vault has Lockout Feature Authentication Bypass

hashicorp/vault · GHSA-qgj7-fmq2-6cc4

low2025-08-01

CVE-2025-6011-Hashicorp Vault has an Observable Discrepancy on Existing and Non-Existing Users

hashicorp/vault · GHSA-mwgr-84fv-3jh9

critical2025-08-01

CVE-2025-6000-Hashicorp Vault has Code Execution Vulnerability via Plugin Configuration

hashicorp/vault · GHSA-mr4h-qf9j-f665

high2025-08-01

CVE-2025-5999-Hashicorp Vault has Privilege Escalation Vulnerability

hashicorp/vault · GHSA-6h4p-m86h-hhgh

medium2025-08-01

CVE-2025-6037-Hashicorp Vault has Incorrect Validation for Non-CA Certificates

hashicorp/vault · GHSA-6c5r-4wfc-3mcx

medium2025-08-01

CVE-2025-51502-Microweber has Reflected XSS Vulnerability in the layout Parameter

microweber/microweber · GHSA-mvj3-hc7j-vp74

medium2025-08-01

CVE-2025-51501-Microweber has Reflected XSS Vulnerability in the id Parameter

microweber/microweber · GHSA-8357-fjvx-xrm8

medium2025-08-01

CVE-2025-51504-Microweber XSS Vulnerability in the homepage Endpoint

microweber/microweber · GHSA-2x2j-3c2v-g3c2

medium2025-08-01

OpenSearch unauthorized data access on fields protected by field level security if field is a member of an object

opensearch-project/security · GHSA-2rjv-cv85-xhgm

medium2025-08-01

OpenSearch unauthorized data access on fields protected by field masking for fields of type ip, geo_point, geo_shape, xy_point, xy_shape

opensearch-project/security · GHSA-rrmm-wq7q-h4v5