Security advisories

critical2025-02-12

CVE-2025-25200-Inefficient Regular Expression Complexity in koa

koajs/koa · GHSA-593f-38f6-jp5m

high2025-02-12

CVE-2025-25199-go-crypto-winnative BCryptGenerateSymmetricKey memory leak

microsoft/go-crypto-winnative · GHSA-29c6-3hcj-89cf

medium2025-02-12

CVE-2025-25184-Possible Log Injection in Rack::CommonLogger

rack/rack · GHSA-7g2v-jj9q-g3rg

low2025-02-12

CVE-2025-1243-Unencrypted transmission in Temporal api-go library

temporalio/api-go · GHSA-q9w6-cwj4-gf4p

medium2025-02-11

CVE-2024-32037-GeoNetwork search end-point information disclosure in response headers

geonetwork/core-geonetwork · GHSA-52rf-25hq-5m33

critical2025-02-11

CVE-2025-24434-Improper Authorization vulnerability in Magento and Adobe Commerce

magento/magento2 · GHSA-fppq-f2m6-xv5c

medium2025-02-11

CVE-2025-24427-Magento Improper Access Control vulnerability

magento/magento2 · GHSA-v3hq-g424-5mgg

medium2025-02-11

CVE-2025-24428-Magento stored Cross-Site Scripting (XSS) vulnerability

magento/magento2 · GHSA-mm87-rrqx-94cr

medium2025-02-11

CVE-2025-24436-Magento Improper Access Control vulnerability

magento/magento2 · GHSA-ghpr-6qhr-rpp8

high2025-02-11

CVE-2025-24438-Magento stored Cross-Site Scripting (XSS) vulnerability

magento/magento2 · GHSA-8884-7rm9-mrx4

medium2025-02-11

CVE-2025-24435-Magento Improper Access Control vulnerability

magento/magento2 · GHSA-82p4-55gj-956p

low2025-02-11

CVE-2025-24432-Magento Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability

magento/magento2 · GHSA-7jmr-43qj-pw47

low2025-02-11

CVE-2025-24430-Magento Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability

magento/magento2 · GHSA-6w27-c66f-gvhq

medium2025-02-11

CVE-2025-24425-Magento Business Logic Error vulnerability

magento/magento2 · GHSA-6ff8-jrfg-43hh

medium2025-02-11

CVE-2025-24437-Magento Improper Access Control vulnerability

magento/magento2 · GHSA-469f-wf4f-3jjv

high2025-02-11

CVE-2025-24413-Magento Stored Cross-Site Scripting (XSS) Vulnerability

magento/magento2 · GHSA-xwgx-8v72-4j5j

high2025-02-11

CVE-2025-24409-Adobe Commerce Improper Authorization vulnerability

magento/magento2 · GHSA-vw47-79jv-3598

high2025-02-11

CVE-2025-24416-Magento Stored Cross-Site Scripting (XSS) Vulnerability

magento/magento2 · GHSA-rjjw-g6hw-7pc9

high2025-02-11

CVE-2025-24412-Magento Stored Cross-Site Scripting (XSS) Vulnerability

magento/magento2 · GHSA-m4rg-mpp2-97px

high2025-02-11

CVE-2025-24410-Magento Stored Cross-Site Scripting (XSS) Vulnerability

magento/magento2 · GHSA-gjxp-46rq-wg4q