Security advisories

medium2025-04-29

CVE-2025-46344-Auth0 NextJS SDK v4 Missing Session Invalidation

auth0/nextjs-auth0 · GHSA-pjr6-jx7r-j4r6

low2025-04-29

CVE-2025-0716-AngularJS improperly sanitizes SVG elements

angular/angular.js · GHSA-j58c-ww9w-pwp5

medium2025-04-29

CVE-2025-46560-vLLM: Quadratic Time Complexity in Input Token Processing​ leads to denial of service

vllm-project/vllm · GHSA-vc6m-hm49-g9qg

high2025-04-29

CVE-2025-46342-Kyverno vulnerable to bypass of policy rules that use namespace selectors in match statements

kyverno/kyverno · GHSA-jrr2-x33p-6hvc

medium2025-04-29

@account-kit/smart-contracts Allowlist Module Bypass Vulnerability

alchemyplatform/aa-sdk · GHSA-wfm2-rq5g-f8v5

critical2025-04-29

CVE-2025-32444-vLLM Vulnerable to Remote Code Execution via Mooncake Integration

vllm-project/vllm · GHSA-hj4w-hm2g-p6w5

high2025-04-29

CVE-2025-30202-Data exposure via ZeroMQ on multi-node vLLM deployment

vllm-project/vllm · GHSA-9f8f-2vmf-885j

low2025-04-29

CVE-2025-46346-YesWiki Stored XSS Vulnerability in Comments

yeswiki/yeswiki · GHSA-59x8-cvxh-3mm4

high2025-04-29

CVE-2025-46347-YesWiki Remote Code Execution via Arbitrary PHP File Write and Execution

yeswiki/yeswiki · GHSA-88xg-v53p-fpvf

critical2025-04-29

CVE-2025-46348-YesWiki Vulnerable to Unauthenticated Site Backup Creation and Download

yeswiki/yeswiki · GHSA-wc9g-6j9w-hr95

high2025-04-29

CVE-2025-46349-YesWiki Vulnerable to Unauthenticated Reflected Cross-site Scripting

yeswiki/yeswiki · GHSA-2f8p-qqx2-gwr2

low2025-04-29

CVE-2025-46350-Yeswiki Vulnerable to Authenticated Reflected Cross-site Scripting

yeswiki/yeswiki · GHSA-cg4f-cq8h-3ch8

medium2025-04-29

CVE-2025-46550-Yeswiki Vulnerable to Unauthenticated Reflected Cross-site Scripting

yeswiki/yeswiki · GHSA-ggqx-43h2-55jp

medium2025-04-29

CVE-2025-46549-Yeswiki Vulnerable to Unauthenticated Reflected Cross-site Scripting

yeswiki/yeswiki · GHSA-r9gv-qffm-xw6f

critical2025-04-29

CVE-2025-32974-org.xwiki.platform:xwiki-platform-security-requiredrights-default required rights analysis doesn't consider TextAreas with default content type

xwiki/xwiki-platform · GHSA-mvgm-3rw2-7j4r

critical2025-04-29

CVE-2025-32973-org.xwiki.platform:xwiki-platform-component-wiki provides no warning when granting XWiki.ComponentClass programming right

xwiki/xwiki-platform · GHSA-x7wv-5qg4-vmr6

low2025-04-29

CVE-2025-32972-The lesscss script service allows cache clearing without programming right

xwiki/xwiki-platform · GHSA-rp38-24m3-rx87

low2025-04-29

CVE-2025-32971-Solr script service doesn't take dropped programming right into account

xwiki/xwiki-platform · GHSA-987p-r3jc-8c8v

medium2025-04-29

CVE-2025-32970-org.xwiki.platform:xwiki-platform-wysiwyg-api Open Redirect vulnerability

xwiki/xwiki-platform · GHSA-pjhg-9wr9-rj96

medium2025-04-29

CVE-2025-1194-Transformers Regular Expression Denial of Service (ReDoS) vulnerability

huggingface/transformers · GHSA-fpwr-67px-3qhx