Security advisories

medium2025-01-29

CVE-2025-24794-snowflake-connector-python vulnerable to insecure deserialization of the OCSP response cache

snowflakedb/snowflake-connector-python · GHSA-m4f6-vcj4-w5mx

medium2025-01-29

CVE-2025-24795-snowflake-connector-python vulnerable to insecure cache files permissions

snowflakedb/snowflake-connector-python · GHSA-r2x6-cjg7-8r43

medium2025-01-29

CVE-2025-24884-kube-audit-rest's example logging configuration could disclose secret values in the audit log

richardoc/kube-audit-rest · GHSA-hcr5-wv4p-h2g2

medium2025-01-29

CVE-2025-24791-snowflake-sdk may incorrectly validate temporary credential cache file permissions

snowflakedb/snowflake-connector-nodejs · GHSA-xfhv-wqj6-rx99

medium2025-01-29

CVE-2025-24790-Snowflake JDBC uses insecure temporary credential cache file permissions

snowflakedb/snowflake-jdbc · GHSA-33g6-495w-v8j2

high2025-01-29

CVE-2025-24789-Snowflake JDBC allows an untrusted search path on Windows

snowflakedb/snowflake-jdbc · GHSA-7hpq-3g6w-pvhf

medium2025-01-29

CVE-2025-24374-Twig security issue where escaping was missing when using null coalesce operator

twigphp/twig · GHSA-3xg3-cgvq-2xwr

medium2025-01-29

CVE-2024-29869-Apache Hive Incorrectly Assigns Permissions for a Critical Resource

apache/hive · GHSA-c476-j253-5rgq

low2025-01-28

Potential DoS when using ContextLines integration

getsentry/sentry-javascript · GHSA-r5w7-f542-q2j4

medium2025-01-28

CVE-2024-11956-pimcore/customer-data-framework vulnerable to SQL Injection

pimcore/pimcore · GHSA-q53r-9hh9-w277

high2025-01-28

CVE-2024-11954-Pimcore Authenticated Stored Cross-Site Scripting (XSS) Via Search Document

pimcore/pimcore · GHSA-xr3m-6gq6-22cg

high2025-01-28

CVE-2024-13484-OpenShift GitOps Operator Namespace Isolation Break

argoproj/argo-cd · GHSA-58fx-7v9q-3g56

critical2025-01-28

CVE-2025-24800-ismp-grandpa crate accepted incorrect signatures

polytope-labs/hyperbridge · GHSA-wwx5-gpgr-vxr7

medium2025-01-28

CVE-2024-45339-Insecure Temporary File usage in github.com/golang/glog

golang/glog · GHSA-6wxm-mpqj-6jpf

medium2025-01-28

CVE-2025-0750-CRI-O Path Traversal vulnerability

cri-o/cri-o · GHSA-hp5j-2585-qx6g

medium2025-01-28

CVE-2024-23953-Apache Hive vulnerable to Observable Timing Discrepancy and Authentication Bypass by Spoofing

apache/hive · GHSA-p953-3j66-hg45

medium2025-01-28

CVE-2025-0736-Infinispan vulnerable to Insertion of Sensitive Information into Log File

infinispan/infinispan · GHSA-269m-c36j-r834

high2025-01-27

CVE-2025-24357-vllm: Malicious model to RCE by torch.load in hf_model_weights_iterator

vllm-project/vllm · GHSA-rh4j-5rhw-hr54

medium2025-01-27

CVE-2025-24354-imgproxy is vulnerable to SSRF against 0.0.0.0

imgproxy/imgproxy · GHSA-j2hp-6m75-v4j4

low2025-01-27

CVE-2024-55228-Dolibarr Cross-site Scripting vulnerability

dolibarr/dolibarr · GHSA-x2j8-vjg7-386r