Security advisories

medium2025-06-13

Ibexa RichText Field Type XSS vulnerabilities in back office

ibexa/fieldtype-richtext · GHSA-9qv6-4pwm-m68f

medium2025-06-13

Ibexa Admin UI XSS vulnerabilities in back office

ibexa/admin-ui · GHSA-5r6x-g6jv-4v87

medium2025-06-13

Ibexa Admin UI assets XSS vulnerabilities in back office

ibexa/admin-ui-assets · GHSA-vhgq-r8gx-5fpv

medium2025-06-13

Ibexa eZ Platform Admin UI assets XSS vulnerabilities in back office

ezsystems/ezplatform-admin-ui-assets · GHSA-r5rx-53g9-25rj

medium2025-06-13

Ibexa eZ Platform Admin UI XSS vulnerabilities in back office

ezsystems/ezplatform-admin-ui · GHSA-r7pm-mw8g-p7px

medium2025-06-13

CVE-2025-49578-starcitizentools/citizen-skin allows stored XSS in user registration date message

starcitizentools/mediawiki-skins-citizen · GHSA-2v3v-3whp-953h

medium2025-06-13

CVE-2025-49579-starcitizentools/citizen-skin allows stored XSS in menu heading message

starcitizentools/mediawiki-skins-citizen · GHSA-g3cp-pq72-hjpv

medium2025-06-13

CVE-2025-49577-starcitizentools/citizen-skin allows stored XSS in preference menu heading messages

starcitizentools/mediawiki-skins-citizen · GHSA-jwr7-992g-68mh

medium2025-06-13

CVE-2025-49576-starcitizentools/citizen-skin allows stored XSS in search no result messages

starcitizentools/mediawiki-skins-citizen · GHSA-86xf-2mgp-gv3g

medium2025-06-13

CVE-2025-22242-Salt's worker process vulnerable to denial of service through file read operation

saltstack/salt · GHSA-989c-m532-p2hv

critical2025-06-13

CVE-2024-38824-Salt vulnerable to directory traversal attack in file receiving method

saltstack/salt · GHSA-8pcp-r83j-fc92

medium2025-06-13

CVE-2025-22240-Salt allows arbitrary directory creation or file deletion

saltstack/salt · GHSA-xh32-3m67-qjgf

medium2025-06-13

CVE-2025-22238-Salt vulnerable to directory traversal attack in minion file cache creation

saltstack/salt · GHSA-r546-h3ff-q585

high2025-06-13

CVE-2025-22236-Salt has minion event bus authorization bypass vulnerability

saltstack/salt · GHSA-jh7c-xh74-h76f

medium2025-06-13

CVE-2025-22237-Salt's on demand pillar functionality vulnerable to arbitrary command injections

saltstack/salt · GHSA-fcr4-h6c4-rvvp

high2025-06-13

CVE-2025-22239-Salt vulnerable to arbitrary event injection

saltstack/salt · GHSA-c46w-gr7f-jm2p

medium2025-06-13

CVE-2025-22241-Salt's file contents overwrite the VirtKey class

saltstack/salt · GHSA-7f3f-x5f5-79gw

medium2025-06-13

CVE-2024-38825-Salt's salt.auth.pki module does not properly authenticate callers

saltstack/salt · GHSA-4j59-vv55-q6h3

medium2025-06-13

CVE-2025-41234-Spring Framework vulnerable to a reflected file download (RFD)

spring-projects/spring-framework · GHSA-6r3c-xf4w-jxjm

low2025-06-12

CVE-2025-43866-Vantage6 Server JWT secret not cryptographically secure

vantage6/vantage6 · GHSA-m3mq-f375-5vgh