Security advisories

high2025-02-21

Leantime allows Cross Site Scripting (XSS) and SQL Injection (SQLi)

leantime/leantime · GHSA-v4q9-437p-mhpg

low2025-02-21

CVE-2025-27104-Vyper has a double eval in For List Iter

vyperlang/vyper · GHSA-h33q-mhmp-8p67

low2025-02-21

CVE-2025-27105-AugAssign evaluation order causing OOB write within the object in Vyper

vyperlang/vyper · GHSA-4w26-8p97-f4jp

low2025-02-21

CVE-2025-26622-Vyper's sqrt doesn't define rounding behavior

vyperlang/vyper · GHSA-2p94-8669-xg86

medium2025-02-21

Leantime allows Stored Cross-Site Scripting (XSS)

leantime/leantime · GHSA-63cr-xg3f-8jvr

medium2025-02-21

Leantime allows Refelected Cross-Site Scripting (XSS)

leantime/leantime · GHSA-52xf-h226-pfgx

medium2025-02-21

Leantime has Insufficiently Protected Credentials

leantime/leantime · GHSA-h6w8-27ph-c385

medium2025-02-21

Leantime allows Stored Cross-Site Scripting (XSS)

leantime/leantime · GHSA-mg4c-884j-pcq9

medium2025-02-21

Leantime has Host Header Injection Vulnerability

leantime/leantime · GHSA-99r5-84gr-59f6

medium2025-02-21

CVE-2025-27100-lakeFS allows an authenticated user to cause a crash by exhausting server memory

treeverse/lakefs · GHSA-j7jw-28jm-whr6

high2025-02-21

CVE-2025-1403-Malciously crafted QPY files can allows Remote Attackers to Cause Denial of Service in Qiskit

qiskit/qiskit · GHSA-fpmr-m242-xm7x

high2025-02-20

CVE-2025-27088-S3-Proxy allows Reflected Cross-site Scripting (XSS) in template implementation

oxyno-zeta/s3-proxy · GHSA-pp9m-qf39-hxjc

critical2025-02-20

Namada-apps allows Excessive Computation in Mempool Validation

anoma/namada · GHSA-f8qm-hmm3-fv7f

critical2025-02-20

Namada-apps can Crash with Excessive Computation in Mempool Validation

anoma/namada · GHSA-82vg-5v4f-f9wq

critical2025-02-20

Namada-apps allows Post-Genesis Validator Bypass

anoma/namada · GHSA-2gw2-qgjg-xh6p

high2025-02-20

Cosmos SDK: Groups module can halt chain when handling a malicious proposal

cosmos/cosmos-sdk · GHSA-x5vx-95h7-rv4p

medium2025-02-20

CVE-2025-25299-Cross-site scripting (XSS) in the CKEditor 5 real-time collaboration package

ckeditor/ckeditor5 · GHSA-j3mm-wmfm-mwvh

critical2025-02-20

CVE-2025-24893-XWiki Platform allows remote code execution as guest via SolrSearchMacros request

xwiki/xwiki-platform · GHSA-rr6p-3pfg-562j

medium2025-02-20

CVE-2024-57716-AutoQueryable leaks sensitive information

trenoncourt/autoqueryable · GHSA-m4mm-534h-5cp5

critical2025-02-20

CVE-2025-0868-DocsGPT Allows Remote Code Execution

arc53/docsgpt · GHSA-9gff-5v8w-x922