Security advisories

medium2025-06-10

CVE-2025-48067-OctoPrint vulnerable to possible file extraction via upload endpoints

octoprint/octoprint · GHSA-m9jh-jf9h-x3h2

high2025-06-10

GeoNetwork affected by XML External Entity (XXE) processing vulnerability in WFS indexing REST API endpoint

geonetwork/core-geonetwork · GHSA-2p76-gc46-5fvc

high2025-06-10

CVE-2025-30220-[XBOW-025-068] XML External Entity (XXE) Processing Vulnerability in GeoServer WFS Service

geoserver/geoserver · GHSA-jj54-8f66-c5pc

high2025-06-10

CVE-2025-30145-GeoServer Infinite Loop Vulnerability in Jiffle process

geoserver/geoserver · GHSA-gr67-pwcv-76gf

medium2025-06-10

CVE-2025-27505-GeoServer Missing Authorization on REST API Index

geoserver/geoserver · GHSA-h86g-x8mm-78m5

high2025-06-10

CVE-2024-57186-Erxes Path Traversal vulnerability

erxes/erxes · GHSA-rq9r-qvwg-829q

high2025-06-10

CVE-2024-57190-Erxes Incorrect Access Control vulnerability

erxes/erxes · GHSA-7rhv-xm4q-wh42

medium2025-06-10

CVE-2024-57189-Erxes Path Traversal vulnerability

erxes/erxes · GHSA-2977-5php-6789

high2025-06-10

CVE-2025-43585-Magento Improper Authorization leading to security feature bypass

magento/magento2 · GHSA-r487-9vv5-75gg

critical2025-06-10

CVE-2025-47110-Magneto contains stored XSS vulnerability

magento/magento2 · GHSA-j934-vjh5-vf9r

medium2025-06-10

CVE-2025-27206-Magento Improper Access Control leads to security feature bypass

magento/magento2 · GHSA-g2pj-xmxq-3r9q

medium2025-06-10

CVE-2024-40625-Coverage REST API Server Side Request Forgery

geoserver/geoserver · GHSA-r4hf-r8gj-jgw2

medium2025-06-10

CVE-2024-38524-GWC Home Page communicate version and revision information

geoserver/geoserver · GHSA-jm79-7xhw-6f6f

critical2025-06-10

CVE-2024-34711-GeoServer has improper ENTITY_RESOLUTION_ALLOWLIST URI validation in XML Processing (SSRF)

geoserver/geoserver · GHSA-mc43-4fqr-c965

high2025-06-10

CVE-2024-29198-GeoServer Vulnerable to Unauthenticated SSRF via TestWfsPost

geoserver/geoserver · GHSA-5gw5-jccf-6hxw

medium2025-06-10

CVE-2025-27817-Apache Kafka Client Arbitrary File Read and Server Side Request Forgery Vulnerability

apache/kafka · GHSA-vgq5-3255-v292

high2025-06-10

CVE-2025-27819-Apache Kafka Deserialization of Untrusted Data vulnerability

apache/kafka · GHSA-mcwh-c9pg-xw43

high2025-06-10

CVE-2025-27818-Apache Kafka Deserialization of Untrusted Data vulnerability

apache/kafka · GHSA-76qp-h5mr-frr4

critical2025-06-09

GeoTools has XML External Entity (XXE) Processing Vulnerability in XSD schema handling

geotools/geotools · GHSA-826p-4gcg-35vw

medium2025-06-09

CVE-2025-5896-taro-css-to-react-native Regular Expression Denial of Service vulnerability

nervjs/taro · GHSA-f5xg-cfpj-2mw6