Security advisories

medium2025-03-05

CVE-2025-27515-Laravel has a File Validation Bypass

laravel/framework · GHSA-78fx-h6xr-vch4

medium2025-03-05

CVE-2025-27412-REDAXO allows Authenticated Reflected Cross Site Scripting - packages installation

redaxo/redaxo · GHSA-8366-xmgf-334f

high2025-03-05

CVE-2025-27497-OpenDJ Denial of Service (DoS) using alias loop

openidentityplatform/opendj · GHSA-93qr-h8pr-4593

medium2025-03-05

CVE-2025-27411-REDAXO allows Arbitrary File Upload in the mediapool page

redaxo/redaxo · GHSA-wppf-gqj5-fc4f

critical2025-03-05

CVE-2023-38693-Lucee RCE/XXE Vulnerability

lucee/lucee · GHSA-vwjx-mmwm-pwrf

medium2025-03-05

CVE-2025-27513-OpenTelemetry .NET has Denial of Service (DoS) Vulnerability in API Package

open-telemetry/opentelemetry-dotnet · GHSA-8785-wc3w-h8q6

high2025-03-05

CVE-2025-26319-FlowiseAI Flowise arbitrary file upload vulnerability

flowiseai/flowise · GHSA-69jq-qr7w-j7qh

medium2025-03-04

CVE-2025-27155-In-memory stored Cross-site scripting (XSS) vulnerability in pineconesim

matrix-org/pinecone · GHSA-fr62-mg2q-7wqv

critical2025-03-04

CVE-2025-27507-IDOR Vulnerabilities in ZITADEL's Admin API that Primarily Impact LDAP Configurations

zitadel/zitadel · GHSA-f3gh-529w-v32x

medium2025-03-04

CVE-2025-27111-Escape Sequence Injection vulnerability in Rack lead to Possible Log Injection

rack/rack · GHSA-8cgq-6mh2-7j6v

low2025-03-03

CVE-2025-27221-URI allows for userinfo Leakage in URI#join, URI#merge, and URI#+

ruby/uri · GHSA-22h5-pq3x-2gf2

medium2025-03-03

CVE-2025-27220-CGI has Regular Expression Denial of Service (ReDoS) potential in Util#escapeElement

ruby/cgi · GHSA-mhwm-jh88-3gjf

medium2025-03-03

CVE-2025-27219-CGI has Denial of Service (DoS) potential in Cookie.parse

ruby/cgi · GHSA-gh9q-2xrm-x6qv

medium2025-03-03

CVE-2025-27498-AEADs/ascon-aead: Plaintext exposed in decrypt_in_place_detached even on tag verification failure

rustcrypto/aeads · GHSA-r38m-44fw-h886

medium2025-03-03

CVE-2024-42512-Security Update for the OPC UA .NET Standard Stack

opcfoundation/ua-.netstandard · GHSA-h958-fxgg-g7w3

medium2025-03-03

CVE-2024-42513-Security Update for the OPC UA .NET Standard Stack

opcfoundation/ua-.netstandard · GHSA-4rcc-7pg7-f57f

medium2025-03-03

CVE-2025-1716-Picklescan Allows Remote Code Execution via Malicious Pickle File Bypassing Static Analysis

mmaitre314/picklescan · GHSA-655q-fx9r-782v

medium2025-03-03

CVE-2025-1889-PyTorch Model Files Can Bypass Pickle Scanners via Unexpected Pickle Extensions

mmaitre314/picklescan · GHSA-769v-p64c-89pr

medium2025-03-03

CVE-2025-27414-MinIO allows an SFTP authentication bypass due to improperly trusted SSH key

minio/minio · GHSA-wc79-7x8x-2p58

medium2025-03-03

CVE-2025-27408-Manifest Uses a One-Way Hash without a Salt

mnfst/manifest · GHSA-h8h6-7752-g28c