Security advisories

medium2025-03-31

CVE-2025-29908-Netty QUIC hash collision DoS attack

netty/netty-incubator-codec-quic · GHSA-hqqc-jr88-p6x2

low2025-03-31

CVE-2025-3001-PyTorch is vulnerable to memory corruption through its torch.lstm_cell function

pytorch/pytorch · GHSA-qfhq-4f3w-5fph

medium2025-03-31

CVE-2025-31125-Vite has a `server.fs.deny` bypassed for `inline` and `raw` with `?import` query

vitejs/vite · GHSA-4r4m-qw57-chr8

medium2025-03-31

CVE-2025-31116-Mobile Security Framework (MobSF) has a SSRF Vulnerability fix bypass on assetlinks_check with DNS Rebinding

mobsf/mobile-security-framework-mobsf · GHSA-fcfq-m8p6-gw56

critical2025-03-31

CVE-2025-30223-Beego allows Reflected/Stored XSS in Beego's RenderForm() Function Due to Unescaped User Input

beego/beego · GHSA-2j42-h78h-q4fg

low2025-03-31

array-init-cursor is unsound when used with types that implement `Drop`

planus-org/planus · GHSA-67r5-rqwv-9p9q

medium2025-03-31

CVE-2025-26042-Uptime Kuma's Regular Expression in pushdeeer and whapi file Leads to ReDoS Vulnerability Due to Catastrophic Backtracking

louislam/uptime-kuma · GHSA-hx7h-9vf7-5xhg

medium2025-03-31

CVE-2025-2999-PyTorch is vulnerable to memory corruption through its unpack_sequence function

pytorch/pytorch · GHSA-vgrw-7cvw-pwgx

low2025-03-31

CVE-2025-3000-PyTorch is vulnerable to memory corruption through its torch.jit.script function

pytorch/pytorch · GHSA-rrmf-rvhw-rf47

medium2025-03-31

CVE-2025-2998-PyTorch is Vulnerable to Memory Consumption through pad_packed_sequence Function

pytorch/pytorch · GHSA-f4hp-rmr7-r7v8

medium2025-03-31

CVE-2025-2967-ConcreteCMS Cross-Site Scripting (XSS) via HTML Block Text Field

concretecms/concretecms · GHSA-xfqf-5rhg-5c73

medium2025-03-31

CVE-2025-2961-Solon Vulnerable to Path Traversal

opensolon/solon · GHSA-2m4q-2c6r-hmc3

low2025-03-30

CVE-2025-2953-PyTorch susceptible to local Denial of Service

pytorch/pytorch · GHSA-3749-ghw9-m3mg

medium2025-03-29

CVE-2025-28092-ShopXO Vulnerable to Server-Side Request Forgery (SSRF) via Image Upload

gongfuxiang/shopxo · GHSA-p736-g6pg-hjhw

medium2025-03-29

CVE-2025-28093-ShopXO Vulnerable to Server-Side Request Forgery (SSRF) via Email Settings

gongfuxiang/shopxo · GHSA-gfhv-5rqh-7qx3

medium2025-03-29

CVE-2025-28094-ShopXO Vulnerable to Server-Side Request Forgery (SSRF) and Cross-Site Scripting (XSS)

gongfuxiang/shopxo · GHSA-24cf-848g-762c

medium2025-03-29

go.rgst.io/stencil/v2 vulnerable to Path Traversal

rgst-io/stencil · GHSA-p799-q2pr-6mxj

low2025-03-28

tough cyclic delegation graphs are not detected

awslabs/tough · GHSA-j8x2-777p-23fc

medium2025-03-28

CVE-2025-2886-tough terminating targets role delegations are not respected

awslabs/tough · GHSA-v4wr-j3w6-mxqc

medium2025-03-28

CVE-2025-2885-tough root metadata version is not checked for sequential versioning

awslabs/tough · GHSA-5vmp-m5v2-hx47