Security advisories

low2025-06-19

CVE-2025-32896-Apache SeaTunnel: Unauthenticated insecure access

apache/seatunnel · GHSA-9x53-gr7p-4qf5

critical2025-06-18

Taylored webhook validation vulnerabilities

tailot/taylored · GHSA-8g98-m4j9-qww5

medium2025-06-18

CVE-2025-50182-urllib3 does not control redirects in browsers and Node.js

urllib3/urllib3 · GHSA-48p4-8xcf-vxj5

medium2025-06-18

CVE-2025-50181-urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation

urllib3/urllib3 · GHSA-pq67-6m6q-mj2v

medium2025-06-18

CVE-2025-49015-Couchbase .NET SDK (client library) does not properly enable hostname verification for TLS certificates

couchbase/couchbase-net-client · GHSA-px2c-r924-mwcc

medium2025-06-18

CVE-2025-50183-OpenList (frontend) allows XSS Attacks in the built-in Markdown Viewer

openlistteam/openlist · GHSA-2hw3-h8qx-hqqp

low2025-06-18

CVE-2025-1088-Grafana long dashboard title or panel name causes unresponsives

grafana/grafana · GHSA-crvv-6w6h-cv34

medium2025-06-18

CVE-2025-5981-OSV-SCALIBR's Container Image Unpacking Vulnerable to Arbitrary File Write via Path Traversal

google/osv-scalibr · GHSA-2hcm-q3f4-fjgw

critical2025-06-17

CVE-2025-3248-Langflow Unauth RCE

langflow-ai/langflow · GHSA-rvqx-wpfh-mfx7

medium2025-06-17

wasmtime_jit_debug Dumps Undefined Memory by `JitDumpFile`

bytecodealliance/wasmtime · GHSA-9ghp-w2hm-vfpf

low2025-06-17

CVE-2025-4754-ash_authentication_phoenix has Insufficient Session Expiration

team-alembic/ash_authentication_phoenix · GHSA-f7gq-h8jv-h3cq

medium2025-06-17

CVE-2025-6050-Mezzanine CMS has a Stored Cross-Site Scripting (XSS) vulnerability in the displayable_links_js function

stephenmcd/mezzanine · GHSA-7pr5-w74r-jjj7

medium2025-06-17

CVE-2025-6167-python-a2a has a path traversal in the create_workflow function

themanojdesai/python-a2a · GHSA-rp38-pj7h-r8q2

high2025-06-16

CVE-2025-6087-OpenNext for Cloudflare (opennextjs-cloudflare) has a SSRF vulnerability via /_next/image endpoint

opennextjs/opennextjs-cloudflare · GHSA-rvpw-p7vw-wj3m

critical2025-06-16

CVE-2025-49825-Teleport allows remote authentication bypass

gravitational/teleport · GHSA-8cqv-pj7f-pwpc

medium2025-06-16

pycares has a Use-After-Free Vulnerability

saghul/pycares · GHSA-5qpg-rh4j-qp35

high2025-06-16

CVE-2025-4565-protobuf-python has a potential Denial of Service issue

protocolbuffers/protobuf · GHSA-8qvm-5x2c-j2w7

medium2025-06-16

CVE-2025-5689-New authd users logging in via SSH are members of the root group

ubuntu/authd · GHSA-g8qw-mgjx-rwjr

medium2025-06-16

CVE-2025-49125-Apache Tomcat - Security constraint bypass for pre/post-resources

apache/tomcat · GHSA-wc4r-xq3c-5cf3

high2025-06-16

CVE-2025-48976-Apache Commons FileUpload, Apache Commons FileUpload: FileUpload DoS via part headers

apache/commons-fileupload · GHSA-vv7r-c36w-3prj