Security advisories

medium2025-04-01

CVE-2024-13941-Ouch Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability

ouch-org/ouch · GHSA-6xfj-hhwh-r3c2

high2025-04-01

CVE-2025-31131-Yeswiki Path Traversal vulnerability allows arbitrary read of files

yeswiki/yeswiki · GHSA-w34w-fvp3-68xm

high2025-04-01

CVE-2024-38988-@alizeait/unflatto Prototype Pollution

alizeait/unflatto · GHSA-q8jq-4rm5-4hm5

high2025-04-01

CVE-2025-31129-jooby-pac4j: deserialization of untrusted data

jooby-project/jooby · GHSA-7c5v-895v-w4q5

critical2025-04-01

CVE-2025-23391-Rancher: Restricted Administrator can change Administrator's passwords

rancher/rancher · GHSA-8p83-cpfg-fj3g

medium2025-04-01

CVE-2025-30177-Apache Camel Missing Header Out Filter Leads to Potential Bypass/Injection Vulnerability

apache/camel · GHSA-vq4p-pchp-6g6v

low2025-04-01

CVE-2025-29868-Apache Answer User Using External Images Potentially Discloses User Information

apache/answer · GHSA-wqcc-mfhw-53pc

critical2025-04-01

CVE-2024-56325-Apache Pinot Vulnerable to Authentication Bypass

apache/pinot · GHSA-6jwp-4wvj-6597

critical2025-04-01

CVE-2025-30065-Apache Parquet Avro Module Vulnerable to Arbitrary Code Execution

apache/parquet-java · GHSA-2c59-37c4-qrx5

low2025-04-01

CVE-2025-27427-Apache ActiveMQ Artemis User Without Create Address Permissions can Modify Address Routing-Type

apache/activemq-artemis · GHSA-3w85-5p9g-h334

medium2025-04-01

CVE-2025-3057-Drupal Core Potential Cross-Site Scripting (XSS) via Error Messages

drupal/core · GHSA-39g6-x4x8-5jcm

high2025-04-01

CVE-2025-31686-Drupal Open Social Missing Authorization vulnerability

goalgorilla/open_social · GHSA-m9w8-wxvp-c9gv

medium2025-04-01

CVE-2025-31685-Drupal Open Social Missing Authorization vulnerability

goalgorilla/open_social · GHSA-gf72-h4cp-wcm4

medium2025-04-01

CVE-2025-31673-Drupal Core Vulnerable to Forceful Browsing

drupal/core · GHSA-wpp8-fjgf-pwc7

low2025-04-01

CVE-2025-31675-Drupal Core Cross-Site Scripting (XSS) Vulnerability

drupal/core · GHSA-m4wj-hhwj-47qp

medium2025-04-01

CVE-2025-31674-Drupal Core Improperly Controlled Modification of Dynamically-Determined Object Attributes Vulnerability

drupal/core · GHSA-2qph-q8xw-gv7q

medium2025-03-31

aws-cdk-lib has Insertion of Sensitive Information into Log File vulnerability when using Cognito UserPoolClient Construct

aws/aws-cdk · GHSA-qq4x-c6h6-rfxh

medium2025-03-31

CVE-2025-3048-AWS SAM CLI Path Traversal allows file copy to local cache

aws/aws-sam-cli · GHSA-pp64-wj43-xqcr

medium2025-03-31

CVE-2025-3047-AWS SAM CLI Path Traversal allows file copy to build container

aws/aws-sam-cli · GHSA-px37-jpqx-97q9

medium2025-03-31

CVE-2025-31128-gifplayer XSS vulnerability

rubentd/gifplayer · GHSA-gr7w-hmch-25g7