Security advisories

medium2025-05-28

CVE-2025-27528-Apache InLong: JDBC Vulnerability for Invisible Character Bypass Leading to Arbitrary File Read

apache/inlong · GHSA-98v7-xxxv-hcrh

medium2025-05-28

CVE-2025-27526-Apache InLong: JDBC Vulnerability For URLEncode and backspace bypass

apache/inlong · GHSA-532x-j9r7-8f73

high2025-05-28

CVE-2025-27522-Apache InLong: JDBC Vulnerability during verification processing

apache/inlong · GHSA-r324-vgr5-73c9

medium2025-05-27

CVE-2025-48490-Laravel Rest Api has a Search Validation Bypass

lomkit/laravel-rest-api · GHSA-69rh-hccr-cxrj

high2025-05-27

CVE-2025-48383-Django-Select2 Vulnerable to Widget Instance Secret Cache Key Leaking

codingjoe/django-select2 · GHSA-wjrh-hj83-3wh7

low2025-05-27

CVE-2025-48382-Fess has Insecure Temporary File Permissions

codelibs/fess · GHSA-g88v-2j67-9rmx

low2025-05-27

CVE-2025-48370-auth-js Vulnerable to Insecure Path Routing from Malformed User Input

supabase/auth-js · GHSA-8r88-6cj9-9fh5

medium2025-05-27

CVE-2024-52588-Strapi allows Server-Side Request Forgery in Webhook function

strapi/strapi · GHSA-v8wj-f5c7-pvxf

medium2025-05-27

CVE-2025-48054-radashi Allows Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

radashi-org/radashi · GHSA-2xv9-ghh9-xc69

medium2025-05-26

CVE-2025-4057-ActiveMQ Artemis AMQ Broker Operator Starting Credentials Reuse

arkmq-org/activemq-artemis-operator · GHSA-q5q7-8x6x-hcg2

medium2025-05-26

CVE-2025-5175-pypickle Incorrect Privilege Assignment vulnerability

erdogant/pypickle · GHSA-qpxx-2cwh-r5vh

medium2025-05-26

CVE-2025-5174-pypickle unsafe deserialization vulnerability

erdogant/pypickle · GHSA-5qwj-342r-h886

medium2025-05-26

CVE-2025-5173-HumanSignal label-studio-ml-backend Deserialization of Untrusted Data vulnerability

humansignal/label-studio-ml-backend · GHSA-55g9-6c2x-gf8q

medium2025-05-25

CVE-2025-5150-docarray prototype pollution

docarray/docarray · GHSA-j9wp-865g-rf48

medium2025-05-25

CVE-2025-5148-FunAudioLLM InspireMusic deserialization vulnerability

funaudiollm/inspiremusic · GHSA-pgp9-g5q8-j3wp

low2025-05-24

CVE-2025-48752-Process Sync has a Potential Unsound Issue in SharedMutex

forestryks/process-sync-rs · GHSA-mqwx-r894-9hfp

low2025-05-24

CVE-2025-48756-SCSIR has a Potential Unsound Issue in WriteSameCommand

maboroshinokiseki/scsir · GHSA-cm3g-qm4h-xm6m

low2025-05-24

CVE-2025-48751-process_lock has a Potential Unsound issue in unlock

tickbh/processlock · GHSA-6v24-6wgf-8vj6

low2025-05-24

CVE-2025-48754-memory_pages division by zero

fractalfir/memory_pages · GHSA-5r4r-9fgh-pw53

medium2025-05-23

CVE-2025-48371-OpenFGA Authorization Bypass

openfga/openfga · GHSA-c72g-53hw-82q7