Security advisories

high2025-02-06

CVE-2024-57699-Netplex Json-smart Uncontrolled Recursion vulnerability

netplex/json-smart-v2 · GHSA-pq2g-wx69-c263

high2025-02-06

CVE-2024-57082-@rpldy/uploader prototype pollution

rpldy/react-uploady · GHSA-pc47-g7gv-4gpw

high2025-02-06

CVE-2024-57086-node-opcua-alarm-condition prototype pollution vulnerability

node-opcua/node-opcua · GHSA-gvwq-6fmx-28xm

high2025-02-06

CVE-2024-57079-@zag-js/core prototype pollution

chakra-ui/zag · GHSA-fg4m-w35q-vfg2

high2025-02-06

CVE-2024-57085-@stryker-mutator/util vulnerable to Prototype Pollution

stryker-mutator/stryker-js · GHSA-9j5q-479x-43g2

high2025-02-06

CVE-2024-57080-vxe-table prototype pollution

x-extends/vxe-table · GHSA-89fp-f5mx-748x

critical2025-02-06

CVE-2024-57077-utils-extend Prototype Pollution

douzi8/utils-extend · GHSA-7qgg-vw88-cc99

high2025-02-06

CVE-2024-57072-module-from-string prototype pollution

exuanbo/module-from-string · GHSA-q5j8-9m9g-x2jh

high2025-02-06

CVE-2024-57068-@tanstack/form-core prototype pollution

tanstack/form · GHSA-ggv3-vmgw-xv2q

high2025-02-06

CVE-2024-57066-@ndhoule/defaults prototype pollution

ndhoule/defaults · GHSA-79h2-v6hh-wq23

medium2025-02-05

Better Auth URL parameter HTML Injection (Reflected Cross-Site scripting)

better-auth/better-auth · GHSA-9x4v-xfq5-m8x5

medium2025-02-05

CVE-2025-26260-Plenti - Code Injection - Denial of Services

plentico/plenti · GHSA-mj4v-hp69-27x5

high2025-02-05

Contrast's unauthenticated recovery allows Coordinator impersonation

edgelesssys/contrast · GHSA-vqv5-385r-2hf8

medium2025-02-05

CVE-2024-10973-Keycloak on Quarkus CLI option for encrypted JGroups ignored

keycloak/keycloak · GHSA-g6qq-c9f9-2772

high2025-02-05

CVE-2025-24805-MobSF Local Privilege Escalation

mobsf/mobile-security-framework-mobsf · GHSA-79f6-p65j-3m2m

high2025-02-05

CVE-2025-24804-MobSF Partial Denial of Service (DoS)

mobsf/mobile-security-framework-mobsf · GHSA-jrm8-xgf3-fwqr

high2025-02-05

CVE-2025-24803-MobSF Stored Cross-Site Scripting (XSS)

mobsf/mobile-security-framework-mobsf · GHSA-cxqq-w3x5-7ph3

high2025-02-05

CVE-2025-24372-CKAN has an XSS vector in user uploaded images in group/org and user profiles

ckan/ckan · GHSA-7pq5-qcp6-mcww

critical2025-02-05

CVE-2024-36404-GeoTools Remote Code Execution (RCE) vulnerability in evaluating XPath expressions

geotools/geotools · GHSA-w3pj-wh35-fq8w

high2025-02-05

CVE-2025-1025-Cockpit Arbitrary File Upload

cockpit-hq/cockpit · GHSA-wp68-xrfg-xvq4