Security advisories

high2025-08-01

CVE-2025-54424-1Panel agent certificate verification bypass leading to arbitrary command execution

1panel-dev/1panel · GHSA-8j63-96wh-wh3j

high2025-08-01

CVE-2025-54386-Traefik Client Plugin's Path Traversal Vulnerability Allows Arbitrary File Overwrite and Remote Code Execution

traefik/traefik · GHSA-q6gg-9f92-r9wg

low2025-07-31

CVE-2025-45769-php-jwt contains weak encryption

firebase/php-jwt · GHSA-2x45-7fc3-mxwq

medium2025-07-31

CVE-2025-53012-MaterialX Lack of MTLX Import Depth Limit Leads to DoS (Denial-Of-Service) Via Stack Exhaustion

academysoftwarefoundation/materialx · GHSA-qc2h-74x3-4v3w

medium2025-07-31

CVE-2025-53009-MaterialX Stack Overflow via Lack of MTLX XML Parsing Recursion Limit

academysoftwarefoundation/materialx · GHSA-wx6g-fm6f-w822

medium2025-07-31

CVE-2025-48074-OpenEXR Out-Of-Memory via Unbounded File Header Values

academysoftwarefoundation/openexr · GHSA-x22w-82jp-8rvf

medium2025-07-31

CVE-2025-48073-OpenEXR ScanLineProcess::run_fill NULL Pointer Write In "reduceMemory" Mode

academysoftwarefoundation/openexr · GHSA-qhpm-86v7-phmm

medium2025-07-31

CVE-2025-48072-OpenEXR Out of Bounds Heap Read due to Bad Pointer Arithmetic in LossyDctDecoder_execute

academysoftwarefoundation/openexr · GHSA-4r7w-q3jg-ff43

high2025-07-31

CVE-2025-48071-OpenEXR Heap-Based Buffer Overflow in Deep Scanline Parsing via Forged Unpacked Size

academysoftwarefoundation/openexr · GHSA-h45x-qhg2-q375

low2025-07-31

CVE-2025-51503-Microweber Has Stored XSS Vulnerability in User Profile Fields

microweber/microweber · GHSA-782f-gxj5-xvqc

low2025-07-31

CVE-2025-53011-MaterialX Null Pointer Dereference in MaterialXCore Shader Generation due to Unchecked implGraphOutput

academysoftwarefoundation/materialx · GHSA-7qw8-3vmf-gj32

low2025-07-31

CVE-2025-53010-MaterialX Null Pointer Dereference in getShaderNodes due to Unchecked nodeGraph->getOutput return

academysoftwarefoundation/materialx · GHSA-3jhf-gxhr-q4cx

high2025-07-31

CVE-2025-34146-@nyariv/sandboxjs has Prototype Pollution vulnerability that may lead to RCE

nyariv/sandboxjs · GHSA-9qm3-6qrr-c76m

medium2025-07-31

MS SWIFT Deserialization RCE Vulnerability

modelscope/ms-swift · GHSA-r54c-2xmf-2cf3

medium2025-07-31

CVE-2025-41419-MS SWIFT WEB-UI RCE Vulnerability

modelscope/ms-swift · GHSA-7c78-rm87-5673

low2025-07-31

CVE-2025-50460-MS SWIFT Remote Code Execution via unsafe PyYAML deserialization

modelscope/ms-swift · GHSA-fm6c-f59h-7mmg

medium2025-07-31

CVE-2025-54589-copyparty Reflected XSS via Filter Parameter

9001/copyparty · GHSA-8mx2-rjh8-q3jq

medium2025-07-31

CVE-2025-24853-Apache JSPWiki Cross-Site Scripting (XSS) Vulnerability via Header Link Rendering

apache/jspwiki · GHSA-rrff-chj9-w4c7

medium2025-07-31

CVE-2025-24854-Apache JSPWiki Cross-Site Scripting (XSS) Vulnerability in the Image Plugin

apache/jspwiki · GHSA-72ww-4rcw-mc62

critical2025-07-30

CVE-2025-54576-OAuth2-Proxy has authentication bypass in oauth2-proxy skip_auth_routes due to Query Parameter inclusion

oauth2-proxy/oauth2-proxy · GHSA-7rh7-c77v-6434