Security advisories

high2025-05-15

CVE-2025-47425-Reflex vulnerable to private state fields modification

reflex-dev/reflex · GHSA-rf8x-9mhr-49wg

high2025-05-15

CVE-2025-47782-motionEye vulnerable to RCE in add_camera Function Due to unsafe command execution

motioneye-project/motioneye · GHSA-g5mq-prx7-c588

medium2025-05-15

CVE-2025-47778-Sulu vulnerable to XXE in SVG File upload Inspector

sulu/sulu · GHSA-f6rx-hf55-4255

low2025-05-15

CVE-2025-47279-undici Denial of Service attack via bad certificate data

nodejs/undici · GHSA-cxrh-j4jr-qwg3

low2025-05-15

CVE-2025-32421-Next.js Race Condition to Cache Poisoning

vercel/next.js · GHSA-qpjv-v59x-3qc4

high2025-05-15

Babylon Integer Overflow in Distribution Module CumulativeRewardRatio Calculation Leading to Chain Halt

babylonlabs-io/babylon · GHSA-869w-47c6-fq8q

high2025-05-15

Babylon Finality Provider `MsgCommitPubRandList` replay attack

babylonlabs-io/babylon · GHSA-7mm3-vfg8-7rg6

medium2025-05-15

CVE-2025-3446-Mattermost Fails to Validate Team Invite Permissions

mattermost/mattermost · GHSA-r7r2-m3vr-c8qc

medium2025-05-15

CVE-2025-31947-Mattermost Fails to Lockout LDAP Users After Repeated Login Failures

mattermost/mattermost · GHSA-qgwx-rffp-6cx9

medium2025-05-14

CVE-2024-52290-LF Edge eKuiper Vulnerable to Stored XSS in Configuration Key Functionality

lf-edge/ekuiper · GHSA-9cwv-pxcr-hfjc

high2025-05-14

CVE-2025-47885-Jenkins Health Advisor by CloudBees Plugin Vulnerable to Cross-Site Scripting

jenkinsci/cloudbees-jenkins-advisor-plugin · GHSA-xrpq-4g9w-qrwj

medium2025-05-14

CVE-2025-47887-Jenkins Cadence vManager Plugin is Missing Permission Checks

jenkinsci/vmanager-plugin · GHSA-rf73-97j8-9vqh

critical2025-05-14

CVE-2025-47884-Jenkins OpenID Connect Provider Plugin Incorrectly Validates Crafted Build ID Tokens

jenkinsci/oidc-provider-plugin · GHSA-q7c3-x7hm-qq72

medium2025-05-14

CVE-2025-47888-Jenkins DingTalk Plugin Unconditionally Disables SSL/TLS Certificate and Hostname Validation

jenkinsci/dingtalk-plugin · GHSA-cp9r-g575-xc5f

medium2025-05-14

CVE-2025-47886-Jenkins Cadence vManager Plugin Vulnerable to Cross-Site Request Forgery

jenkinsci/vmanager-plugin · GHSA-5w52-96jj-fv59

critical2025-05-14

CVE-2025-4641-BoniGarcia WebDriverManager Affected By Improper Restriction of XML External Entity Reference

bonigarcia/webdrivermanager · GHSA-pwm3-776c-8q7q

high2025-05-14

Cosmos EVM Allows Partial Precompile State Writes

cosmos/evm · GHSA-mjfq-3qr2-6g84

medium2025-05-14

CVE-2025-46721-nosurf vulnerable to CSRF due to non-functional same-origin request checks

justinas/nosurf · GHSA-w9hf-35q4-vcjw

high2025-05-14

CVE-2025-3931-Yggdrasil Vulnerable to Local Privilege Escalation

redhatinsights/yggdrasil · GHSA-rpg2-jvhp-h354

medium2025-05-14

CVE-2025-26795-Apache IoTDB JDBC Driver Discloses Sensitive Information via Log Files

apache/iotdb · GHSA-gp98-hfvm-2r4x