Security advisories

medium2025-07-10

CVE-2025-53626-@pdfme/common vulnerable to to XSS and Prototype Pollution through its expression evaluation

pdfme/pdfme · GHSA-54xv-94qv-2gfg

medium2025-07-10

CVE-2025-53549-Matrix Rust SDK vulnerable to SQL Injection through its EventCache implementation

matrix-org/matrix-rust-sdk · GHSA-275g-g844-73jh

medium2025-07-10

CVE-2025-53364-Parse Server exposes the data schema via GraphQL API

parse-community/parse-server · GHSA-48q3-prgv-gm4w

medium2025-07-10

CVE-2025-6211-LlamaIndex vulnerable to data loss through hash collisions in its DocugamiReader class

run-llama/llama_index · GHSA-5hq9-5r78-2gjh

high2025-07-10

CVE-2025-53625-DynamicPageList3 vulnerability exposes hidden/suppressed usernames

universal-omega/dynamicpagelist3 · GHSA-7pgw-q3qp-6pgq

critical2025-07-09

CVE-2025-53624-docusaurus-plugin-content-gists vulnerability exposes GitHub Personal Access Token

webbertakken/docusaurus-plugin-content-gists · GHSA-qf34-qpr4-5pph

low2025-07-09

CVE-2025-53678-Jenkins User1st uTester Plugin vulnerability exposes unencrypted token to authenticated users

jenkinsci/user1st-utester-plugin · GHSA-w4xv-mj6v-p4g2

medium2025-07-09

CVE-2025-53742-Jenkins Applitools Eyes Plugin vulnerability exposes unencrypted keys to certain authenticated users

jenkinsci/applitools-eyes-plugin · GHSA-q92v-3f4w-5xg8

medium2025-07-09

CVE-2025-53743-Jenkins Applitools Eyes Plugin vulnerability does not mask API keys on its job configuration form

jenkinsci/applitools-eyes-plugin · GHSA-jmrv-rxgr-phvr

medium2025-07-09

CVE-2025-53669-Jenkins VAddy Plugin vulnerability exposes plaintext keys on its job configuration form

jenkinsci/vaddy-plugin · GHSA-8gp3-m447-gw2v

medium2025-07-09

CVE-2025-53676-Jenkins Xooa Plugin vulnerability exposes unencrypted tokens to authenticated users

jenkinsci/xooa-plugin · GHSA-56h7-r62c-83qp

medium2025-07-09

CVE-2025-53675-Jenkins Warrior Framework Plugin vulnerability exposes unencrypted passwords to certain authenticated users

jenkinsci/warrior-plugin · GHSA-2g8w-9933-36vr

medium2025-07-09

CVE-2025-53677-Jenkins Xooa Plugin vulnerability does not mask its Xooa Deployment Token

jenkinsci/xooa-plugin · GHSA-23j7-px3w-jwp2

medium2025-07-09

CVE-2025-53674-Jenkins Sensedia API Platform Plugin vulnerability exposes unencrypted tokens

jenkinsci/sensedia-api-platform-plugin · GHSA-vx57-hphr-3mr9

medium2025-07-09

CVE-2025-53657-Jenkins ReadyAPI Functional Testing Plugin vulnerability exposes secrets

jenkinsci/soapui-pro-functional-testing-plugin · GHSA-r496-x769-f8j4

medium2025-07-09

CVE-2025-53664-Jenkins Apica Loadtest Plugin vulnerability exposes authentication tokens

jenkinsci/apica-loadtest-plugin · GHSA-q8p4-vw42-66gh

medium2025-07-09

CVE-2025-53663-Jenkins IBM Cloud DevOps Plugin vulnerability exposes SonarQube authentication tokens

jenkinsci/ibm-cloud-devops-plugin · GHSA-pgrx-5f8q-r5mq

medium2025-07-09

CVE-2025-53659-Jenkins QMetry Test Management Plugin stores unencrypted API keys

jenkinsci/qmetry-test-management-plugin · GHSA-p9gh-rpjw-78qg

medium2025-07-09

CVE-2025-53668-Jenkins VAddy Plugin vulnerability exposes unencrypted keys to certain authenticated users

jenkinsci/vaddy-plugin · GHSA-mr49-vmp6-2pwq

medium2025-07-09

CVE-2025-53667-Jenkins Dead Man's Snitch Plugin vulnerability does not mask tokens

jenkinsci/deadmanssnitch-plugin · GHSA-m248-72rh-cpx4