Security advisories

medium2025-01-31

CVE-2024-11741-Grafana Alerting VictorOps integration could be exposed to users with Viewer permission

grafana/grafana · GHSA-wxcc-2f3q-4h58

medium2025-01-31

CVE-2025-23367-WildFly improper RBAC permission

wildfly/wildfly-core · GHSA-qr6x-62gq-4ccp

critical2025-01-31

CVE-2025-23215-PMD Designer's release key passphrase (GPG) available on Maven Central in cleartext

pmd/pmd · GHSA-88m4-h43f-wx84

medium2025-01-30

CVE-2025-0142-Jenkins Zoom Plugin Stores Sensitive Information in Cleartext

jenkinsci/zoom-plugin · GHSA-jx45-xp6q-cwjc

high2025-01-30

CVE-2025-24802-Soundness issue with Plonky2 look up tables

0xpolygonzero/plonky2 · GHSA-hj49-h7fq-px5h

medium2025-01-30

CVE-2025-23216-Argo CD does not scrub secret values from patch errors

argoproj/argo-cd · GHSA-47g2-qmh2-749v

medium2025-01-30

CVE-2025-24376-KubeWarden's AdmissionPolicy and AdmissionPolicyGroup policies can be used to alter PolicyReport resources

kubewarden/kubewarden-controller · GHSA-fc89-jghx-8pvg

medium2025-01-30

CVE-2025-24784-Kubewarden-Controller information leak via AdmissionPolicyGroup Resource

kubewarden/kubewarden-controller · GHSA-756x-m4mj-q96c

medium2025-01-30

CVE-2025-24883-Go Ethereum vulnerable to DoS via malicious p2p message

ethereum/go-ethereum · GHSA-q26p-9cq4-7fc2

medium2025-01-30

Argo CD GitOps Engine does not scrub secret values from patch errors

argoproj/gitops-engine · GHSA-274v-mgcv-cm8j

critical2025-01-30

General OpenMRS Security Advisory, January 2025: Penetration Testing Results and Patches

openmrs/openmrs-core · GHSA-vpxm-cr3r-pjp9

low2025-01-30

CVE-2024-55416-DevDojo Voyager vulnerable to reflected Cross-site Scripting

thedevdojo/voyager · GHSA-mm49-4f2g-c3wf

high2025-01-30

CVE-2024-55415-DevDojo Voyager vulnerable to path traversal

thedevdojo/voyager · GHSA-j63m-2vr6-fv7m

medium2025-01-30

CVE-2024-53615-files.photo.gallery command injection

mjau-mjau/files.photo.gallery · GHSA-5wjw-qjhm-v43h

medium2025-01-30

CVE-2024-55417-DevDojo Voyager Arbitrary File Write

thedevdojo/voyager · GHSA-35p2-5vrh-m3p6

critical2025-01-29

CVE-2025-0851-Deep Java Library path traversal issue

deepjavalibrary/djl · GHSA-jcrp-x7w3-ffmg

medium2025-01-29

fast-fault has a segmentation fault due to lack of bound check

aldanor/fast-float-rust · GHSA-8655-xgh5-5vvq

medium2025-01-29

fast-float2 has a segmentation fault due to lack of bound check

alexhuszagh/fast-float-rust · GHSA-jqcp-xc3v-f446

medium2025-01-29

CVE-2025-24788-Snowflake.Data has weak temporary files permissions

snowflakedb/snowflake-connector-net · GHSA-2mqw-rq5m-8hc8

high2025-01-29

CVE-2025-24793-snowflake-connector-python vulnerable to SQL Injection in write_pandas

snowflakedb/snowflake-connector-python · GHSA-2vpq-fh52-j3wv