Security advisories

high2025-02-11

CVE-2025-24415-Magento Stored Cross-Site Scripting (XSS) Vulnerability

magento/magento2 · GHSA-gc27-rvvm-q77r

high2025-02-11

CVE-2025-24417-Magento Stored Cross-Site Scripting (XSS) Vulnerability

magento/magento2 · GHSA-g3j6-9753-8mp2

high2025-02-11

CVE-2025-24414-Magento Stored Cross-Site Scripting (XSS) Vulnerability

magento/magento2 · GHSA-fhw6-3mj5-w9gv

high2025-02-11

CVE-2025-24406-Adobe Commerce Path Traversal

magento/magento2 · GHSA-954p-ff72-327w

medium2025-02-11

CVE-2025-24424-Magento Improper Access Control vulnerability

magento/magento2 · GHSA-539v-w87w-w62c

medium2025-02-11

CVE-2025-24408-Magento Information Exposure vulnerability

magento/magento2 · GHSA-3cfg-w257-cgf8

high2025-02-11

CVE-2025-24411-Magento Improper Access Control vulnerability

magento/magento2 · GHSA-36hw-x3cc-m258

medium2025-02-11

CVE-2024-52067-Apache NiFi: Potential Insertion of Sensitive Parameter Values in Debug Log

apache/nifi · GHSA-v3vc-6qcv-4vrx

medium2025-02-11

CVE-2025-25202-Ash Authentication has flawed token revocation checking logic in actions generated by `mix ash_authentication.install`

team-alembic/ash_authentication · GHSA-qrm9-f75w-hg4c

low2025-02-11

CVE-2024-12797-Vulnerable OpenSSL included in cryptography wheels

pyca/cryptography · GHSA-79v4-65xg-pq4g

high2025-02-11

CVE-2025-24976-Distribution's token authentication allows to inject an untrusted signing key in a JWT

distribution/distribution · GHSA-phw4-mc57-4hwc

critical2025-02-11

CVE-2024-12366-PandasAI interactive prompt function Remote Code Execution (RCE)

sinaptik-ai/pandas-ai · GHSA-vv2h-2w3q-3fx7

low2025-02-11

CVE-2025-1211-Server-side Request Forgery (SSRF) in hackney

benoitc/hackney · GHSA-vq52-99r9-h5pw

medium2025-02-10

Hickory DNS failure to verify self-signed RRSIG for DNSKEYs

hickory-dns/hickory-dns · GHSA-v7pc-74h8-xq2h

medium2025-02-10

CVE-2024-57177-CouchAuth has a Server-Side Template Injection vulnerability in its email functionality

perfood/couch-auth · GHSA-r385-c5fc-x56c

medium2025-02-10

CVE-2025-25194-Server-Side Request Forgery (SSRF) in activitypub_federation

lemmynet/activitypub-federation-rust · GHSA-7723-35v7-qcxw

medium2025-02-10

CVE-2024-13209-Stored XSS in REDAXO

redaxo/redaxo · GHSA-7wj8-856p-qc9m

medium2025-02-10

CVE-2024-11831-Cross-site Scripting (XSS) in serialize-javascript

yahoo/serialize-javascript · GHSA-76p7-773f-r4q5

medium2025-02-10

CVE-2025-25193-Denial of Service attack on windows app using Netty

netty/netty · GHSA-389x-839f-4rhx

medium2025-02-10

grcov has an out of bounds write triggered by crafted coverage data

mozilla/grcov · GHSA-qm2p-4w45-v2vr