Security advisories

high2025-03-20

CVE-2024-10110-Aim Vulnerable to Denial of Service (DoS)

aimhubio/aim · GHSA-fx47-jpv9-7hxr

low2025-03-20

CVE-2024-54016-Apache Seata Vulnerable to Data Amplification

apache/incubator-seata · GHSA-65vg-64g8-mwjr

low2025-03-20

CVE-2024-47552-Apache Seata Vulnerable to Deserialization of Untrusted Data

apache/incubator-seata · GHSA-2r4x-667f-mpfh

high2025-03-20

CVE-2025-22228-Spring Security Does Not Enforce Password Length

spring-projects/spring-security · GHSA-mg83-c7gq-rv5c

medium2025-03-19

CVE-2025-2536-Liferay Portal and Liferay DXP Vulnerable to Cross-Site Scripting (XSS)

liferay/liferay-portal · GHSA-hrc4-p2h3-pjqw

medium2025-03-19

CVE-2024-7631-OpenShift Console Has a Path Traversal Vulnerability

openshift/console · GHSA-69x5-hjg4-m267

high2025-03-19

CVE-2025-29926-The WikiManager REST API allows any user to create wikis

xwiki/xwiki-platform · GHSA-gfp2-6qhm-7x43

high2025-03-19

CVE-2025-29925-XWiki allows unregistered users to access private pages information through REST endpoint

xwiki/xwiki-platform · GHSA-22q5-9phm-744v

high2025-03-19

CVE-2025-29924-XWiki uses the wrong wiki reference in AuthorizationManager

xwiki/xwiki-platform · GHSA-gq32-758c-3wm3

high2025-03-19

CVE-2025-27415-Nuxt allows DOS via cache poisoning with payload rendering response

nuxt/nuxt · GHSA-jvhm-gjrh-3h93

medium2025-03-19

CVE-2024-25132-OpenShift Hive Has an Uncontrolled Resource Consumption Vulnerability

openshift/hive · GHSA-c392-wrgw-jjfw

high2025-03-19

CVE-2025-30196-Jenkins AnchorChain Plugin Has a Cross-Site Scripting (XSS) Vulnerability

jenkinsci/anchor-chain-plugin · GHSA-xxrg-mg63-qfpj

low2025-03-19

CVE-2025-30197-Jenkins Zoho QEngine Plugin Displays Unmasked API Keys

jenkinsci/zohoqengine-plugin · GHSA-2x3g-rr4w-4qrp

high2025-03-19

CVE-2025-30153-Improper Handling of Highly Compressed Data (Data Amplification) in github.com/getkin/kin-openapi/openapi3filter

getkin/kin-openapi · GHSA-wq9g-9vfc-cfq9

medium2025-03-19

CVE-2025-30152-Sylius PayPal Plugin has an Order Manipulation Vulnerability after PayPal Checkout

sylius/paypalplugin · GHSA-hxg4-65p5-9w37

critical2025-03-19

CVE-2025-29783-vLLM Allows Remote Code Execution via Mooncake Integration

vllm-project/vllm · GHSA-x3m8-f7g5-qhm7

medium2025-03-19

CVE-2025-29770-vLLM denial of service via outlines unbounded cache on disk

vllm-project/vllm · GHSA-mgrm-fgjv-mhv8

medium2025-03-19

CVE-2025-30144-Fast-JWT Improperly Validates iss Claims

nearform/fast-jwt · GHSA-gm45-q3v2-6cf8

medium2025-03-19

CVE-2025-1472-Mattermost Fails to Properly Perform Viewer Role Authorization

mattermost/mattermost · GHSA-fqrq-xmxj-v47x

high2025-03-19

CVE-2025-30154-Multiple Reviewdog actions were compromised during a specific time period

reviewdog/reviewdog · GHSA-qmg3-hpqr-gqvc