Security advisories

high2025-02-10

Unknown vulnerability in Coinbase Wallet SDK

coinbase/coinbase-wallet-sdk · GHSA-8rgj-285w-qcq4

medium2025-02-10

esbuild enables any website to send any requests to the development server and read the response

evanw/esbuild · GHSA-67mh-4wv8-2f99

medium2025-02-10

CVE-2025-25188-Hickory DNS's DNSSEC validation may accept broken authentication chains

hickory-dns/hickory-dns · GHSA-37wc-h8xc-5hc4

medium2025-02-10

CVE-2025-25186-Possible DoS by memory exhaustion in net-imap

ruby/net-imap · GHSA-7fc5-f82f-cx69

high2025-02-10

CVE-2025-24970-SslHandler doesn't correctly validate packets which can lead to native crash when using native SSLEngine

netty/netty · GHSA-4g8c-wm8x-jfhw

medium2025-02-10

CVE-2025-25247-Apache Felix Webconsole: XSS in services console

apache/felix-dev · GHSA-4c37-7m5h-c8m9

high2025-02-07

Connect-CMS information that is restricted to viewing is visible

opensource-workshop/connect-cms · GHSA-2237-5r9w-vm8j

medium2025-02-07

Connect-CMS Access control vulnerability

opensource-workshop/connect-cms · GHSA-5rjc-jc28-cwgg

medium2025-02-07

xml2rfc has file inclusion irregularities

ietf-tools/xml2rfc · GHSA-432c-wxpg-m4q3

high2025-02-07

CVE-2025-24366-SFTPGo has insufficient sanitization of user provided rsync command

drakkan/sftpgo · GHSA-vj7w-3m8c-6vpx

medium2025-02-07

CVE-2025-24980-Pimcore Admin Classic Bundle allows user enumeration

pimcore/admin-ui-classic-bundle · GHSA-vr5f-php7-rg24

low2025-02-06

CVE-2025-25183-vLLM uses Python 3.12 built-in hash() which leads to predictable hash collisions in prefix cache

vllm-project/vllm · GHSA-rm76-4mrf-v9r8

high2025-02-06

CVE-2025-24787-WhoDB allows parameter injection in DB connection URIs leading to local file inclusion

clidey/whodb · GHSA-c7w4-9wv8-7x7c

critical2025-02-06

CVE-2025-24786-WhoDB has a path traversal opening Sqlite3 database

clidey/whodb · GHSA-9r4c-jwx3-3j76

critical2025-02-06

CVE-2025-24981-Parsed HTML anchor links in Markdown provided to parseMarkdown can result in XSS in @nuxtjs/mdc

nuxt-modules/mdc · GHSA-j82m-pc2v-2484

critical2025-02-06

Multiple rtmpdump vulnerabilities

rudloff/rtmpdump-bin · GHSA-vrpv-vw92-328g

high2025-02-06

CVE-2025-23217-Mitmweb API Authentication Bypass Using Proxy Server

mitmproxy/mitmproxy · GHSA-wg33-5h85-7q5p

high2025-02-06

CVE-2024-45626-Apache James vulnerable to denial of service through JMAP HTML to text conversion

linagora/james-project · GHSA-57m2-h3fw-rxhw

high2025-02-06

CVE-2024-37358-Apache James vulnerable to denial of service through the use of IMAP literals

apache/james-project · GHSA-56jp-w6vw-j3jw

high2025-02-06

CVE-2024-57075-eazy-logger prototype pollution

shakyshane/eazy-logger · GHSA-r7jx-5m6m-cpg9