Security advisories

high2025-03-10

CVE-2025-25977-canvg Prototype Pollution vulnerability

canvg/canvg · GHSA-v2mw-5mch-w8c5

critical2025-03-10

CVE-2025-24813-Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT

apache/tomcat · GHSA-83qj-6fr2-vhqg

medium2025-03-10

LocalS3 XML Parser Vulnerable to XML External Entity (XXE) Injection

robothy/local-s3 · GHSA-47qw-ccjm-9c2c

medium2025-03-10

LocalS3 Project Vulnerable to XML External Entity (XXE) Injection via Bucket Tagging API

robothy/local-s3 · GHSA-v232-254c-m6p7

medium2025-03-10

LocalS3 Project Bucket Operations Vulnerable to XML External Entity (XXE) Injection

robothy/local-s3 · GHSA-2466-4485-4pxj

medium2025-03-10

CVE-2025-1944-Zip Exploit Crashes Picklescan But Not PyTorch

mmaitre314/picklescan · GHSA-7q5r-7gvp-wc82

medium2025-03-10

CVE-2025-1945-Zip Flag Bit Exploit Crashes Picklescan But Not PyTorch

mmaitre314/picklescan · GHSA-w8jq-xcqf-f792

medium2025-03-10

CVE-2025-27136-LocalS3 CreateBucketConfiguration Endpoint XML External Entity (XXE) Injection

robothy/local-s3 · GHSA-g6wm-2v64-wq36

low2025-03-10

CVE-2025-2149-PyTorch: Manipulation of the argument scale/zero_point leads to improper initialization via Quantized Sigmoid Module

pytorch/pytorch · GHSA-x3gm-94wq-g975

critical2025-03-10

CVE-2025-1497-PlotAI eval vulnerability

mljar/plotai · GHSA-2hmp-5wqg-f24h

low2025-03-10

CVE-2025-2148-PyTorch Tuple Handler is Vulnerable to Memory Corruption through Manipulation of None Argument

pytorch/pytorch · GHSA-c678-jfcj-6jmf

medium2025-03-10

CVE-2024-13919-Laravel framework susceptible to reflected cross-site scripting

laravel/framework · GHSA-83wp-f5c3-hqqr

medium2025-03-10

CVE-2024-13918-Laravel framework susceptible to reflected cross-site scripting

laravel/framework · GHSA-546h-56qp-8jmw

medium2025-03-09

CVE-2025-2123-GeSHi XSS possible in the get_var function of /contrib/cssgen.php

geshi/geshi-1.0 · GHSA-pr6q-g5gv-qgr7

medium2025-03-09

CVE-2025-27636-Apache Camel: Camel Message Header Injection via Improper Filtering

apache/camel · GHSA-2c2h-2855-mf97

medium2025-03-08

qcp has possible crash/DOS in some build configurations

crazyscot/qcp · GHSA-fmwf-c46w-r8qm

medium2025-03-07

CVE-2025-53605-Crash due to uncontrolled recursion in protobuf crate

stepancheg/rust-protobuf · GHSA-2gh3-rmm4-6rq5

high2025-03-07

Horcrux Double Sign Possibility

strangelove-ventures/horcrux · GHSA-6wxf-7784-62fp

medium2025-03-07

CVE-2025-4432-Some AES functions may panic when overflow checking is enabled in ring

briansmith/ring · GHSA-4p46-pwfr-66x6

high2025-03-07

CVE-2025-24043-Microsoft Security Advisory CVE-2025-24043 | WinDbg Remote Code Execution Vulnerability

dotnet/diagnostics · GHSA-hpw7-8qpc-34p3