Security advisories

low2025-07-18

CVE-2025-7789-xxl-job has Inadequate Encryption Strength

xuxueli/xxl-job · GHSA-565h-44m8-4c2v

medium2025-07-18

CVE-2025-46002-Filemanager is vulnerable to Relative Path Traversal through filemanager.php

simogeo/filemanager · GHSA-r7q6-6fmq-mx4c

low2025-07-18

CVE-2025-7787-XXL-JOB is vulnerable to SSRF attacks

xuxueli/xxl-job · GHSA-f8vw-8vgh-22r9

critical2025-07-18

CVE-2025-46001-simogeo/filemanager arbitrary file upload vulnerability

simogeo/filemanager · GHSA-m5hw-rhvr-f47c

medium2025-07-18

CVE-2025-6233-Mattermost Path Traversal vulnerability

mattermost/mattermost · GHSA-wvw2-3jh4-4c39

low2025-07-18

CVE-2025-6227-Mattermost has Insufficiently Protected Credentials

mattermost/mattermost · GHSA-4fwj-8595-wp25

medium2025-07-18

CVE-2025-6226-Mattermost Missing Authentication for Critical Function

mattermost/mattermost · GHSA-7h34-9chr-58qh

high2025-07-18

CVE-2025-6023-Grafana is vulnerable to XSS attacks through open redirects and path traversal

grafana/grafana · GHSA-vqph-p5vc-g644

medium2025-07-17

CVE-2025-54070-OpenZeppelin Contracts Bytes's lastIndexOf function with position argument performs out-of-bound memory access on empty buffers

openzeppelin/openzeppelin-contracts · GHSA-9rcw-c2f9-2j55

low2025-07-17

CVE-2025-7339-on-headers is vulnerable to http response header manipulation

jshttp/on-headers · GHSA-76c9-3jph-rj3q

high2025-07-17

CVE-2025-7338-Multer vulnerable to Denial of Service via unhandled exception from malformed request

expressjs/multer · GHSA-fjgf-rc76-4x9p

critical2025-07-17

CVE-2025-54068-Livewire is vulnerable to remote command execution during component property update hydration

livewire/livewire · GHSA-29cq-5w36-x7w3

medium2025-07-17

CVE-2025-54066-DiracX-Web is vulnerable to attack through an Open Redirect on its login page

diracgrid/diracx-web · GHSA-hfj7-542q-8fvv

medium2025-07-17

CVE-2025-3415-Grafana's insecure DingDing Alert integration exposes sensitive information

grafana/grafana · GHSA-46m5-8hpj-p5p5

medium2025-07-16

CVE-2025-53892-vue-i18n's escapeParameterHtml does not prevent DOM-based XSS through its tag attributes

intlify/vue-i18n · GHSA-x8qp-wqqm-57ph

high2025-07-16

CVE-2025-53893-File Browser's Uncontrolled Memory Consumption vulnerability can enable DoS attack due to oversized file processing

filebrowser/filebrowser · GHSA-7xqm-7738-642x

high2025-07-16

Slice Ring Buffer and Slice Deque contains four unique double-free vulnerabilities triggered through safe APIs

gnzlbg/slice_deque · GHSA-7mcq-f592-pf7v

high2025-07-16

CVE-2025-53826-File Browser’s insecure JWT handling can lead to session replay attacks after logout

filebrowser/filebrowser · GHSA-7xwp-2cpp-p8r7

high2025-07-16

CVE-2024-9408-Eclipse GlassFish is vulnerable to Server Side Request Forgery attacks through specific endpoints

eclipse-ee4j/glassfish · GHSA-f7h5-c625-3795

medium2025-07-16

CVE-2024-10029-Eclipse GlassFish is vulnerable to Reflected XSS attacks through its Administration Console

eclipse-ee4j/glassfish · GHSA-vqrm-83g6-pfv4