Security advisories

low2025-01-27

CVE-2024-55227-Dolibarr Cross-site Scripting vulnerability

dolibarr/dolibarr · GHSA-2v3r-gvq5-qqgh

low2025-01-27

CVE-2025-24783-Apache Cocoon vulnerable to Incorrect Usage of Seeds in Pseudo-Random Number Generator

apache/cocoon · GHSA-pff9-53m5-qr56

medium2025-01-27

CVE-2025-24361-Opening a malicious website while running a Nuxt dev server could allow read-only access to code

nuxt/nuxt · GHSA-4gf7-ff8x-hq99

medium2025-01-27

CVE-2025-24360-Opening a malicious website while running a Nuxt dev server could allow read-only access to code

nuxt/nuxt · GHSA-2452-6xj8-jh47

high2025-01-27

CVE-2025-24814-Apache Solr vulnerable to Execution with Unnecessary Privileges

apache/solr · GHSA-68r2-fwcg-qpm8

medium2025-01-27

CVE-2024-52012-Apache Solr Relative Path Traversal vulnerability

apache/solr · GHSA-4p5m-gvpf-f3x5

medium2025-01-24

CVE-2024-57041-NodeBB Cross-site scripting (XSS) vulnerability

nodebb/nodebb · GHSA-vqr3-vrrg-f3jh

medium2025-01-24

CVE-2025-24363-HL7 FHIR IG Publisher potentially exposes GitHub repo user and credential information

hl7/fhir-ig-publisher · GHSA-6729-95v3-pjc2

high2025-01-24

CVE-2025-24359-ASTEVAL Allows Maliciously Crafted Format Strings to Lead to Sandbox Escape

lmfit/asteval · GHSA-3wwr-3g9f-9gc7

high2025-01-24

CVE-2025-24355-Updatecli exposes Maven credentials in console output

updatecli/updatecli · GHSA-v34r-vj4r-38j6

high2025-01-24

CVE-2025-24362-GitHub PAT written to debug artifacts

github/codeql-action · GHSA-vqf5-2xx6-9wfm

high2025-01-24

CVE-2024-52807-XXE vulnerability in XSLT parsing in `org.hl7.fhir.publisher`

hl7/fhir-ig-publisher · GHSA-8c3x-hq82-gjcm

medium2025-01-24

CVE-2024-57556-Cross Site Scripting vulnerability in store2

nbubna/store · GHSA-w5hq-hm5m-4548

low2025-01-23

CVE-2024-6533-Directus has a DOM-Based cross-site scripting (XSS) via layout_options

directus/directus · GHSA-9qrm-48qf-r2rw

medium2025-01-23

CVE-2025-24353-Directus allows privilege escalation using Share feature

directus/directus · GHSA-pmf4-v838-29hg

high2025-01-23

ASTEVAL Allows Malicious Tampering of Exposed AST Nodes Leads to Sandbox Escape

lmfit/asteval · GHSA-vp47-9734-prjw

high2025-01-23

CVE-2025-24033-Unlimited consumption of resources in @fastify/multipart

fastify/fastify-multipart · GHSA-27c6-mcxv-x3fh

low2025-01-23

Reflected Cross Site Scripting (XSS) in error message

silverstripe/silverstripe-framework · GHSA-74j9-xhqr-6qv3

high2025-01-23

CVE-2025-24030-Envoy Admin Interface Exposed through prometheus metrics endpoint

envoyproxy/gateway · GHSA-j777-63hf-hx76

high2025-01-23

CVE-2025-22153-try/except* clauses could allow bypass RestrictedPython via type confusion bug in the CPython interpreter

zopefoundation/restrictedpython · GHSA-gmj9-h825-chq2