Security advisories

high2025-01-17

CVE-2025-23205-nbgrader's `frame-ancestors: self` grants all users access to formgrader

jupyter/nbgrader · GHSA-fcr8-4r9f-r66m

high2025-01-17

CVE-2024-48460-Eugeny Tabby Sends Password Despite Host Key Verification Failure

eugeny/tabby · GHSA-8vq4-8hfp-29xh

medium2025-01-16

CVE-2024-52594-Gomatrixserverlib Server-Side Request Forgery (SSRF) on redirects and federation

matrix-org/gomatrixserverlib · GHSA-4ff6-858j-r822

medium2025-01-16

CVE-2025-20621-Mattermost webapp crash via a crafted post

mattermost/mattermost · GHSA-w6xh-c82w-h997

medium2025-01-16

CVE-2024-56515-Matrix Media Repo (MMR) allows untrusted file formats can be thumbnailed, invoking potentially further untrusted decoders

t2bot/matrix-media-repo · GHSA-rcxc-wjgw-579r

medium2025-01-16

CVE-2024-52602-Matrix Media Repo (MMR) allows Server-Side Request Forgery (SSRF) on redirects and federation

t2bot/matrix-media-repo · GHSA-r6jg-jfv6-2fjv

medium2025-01-16

CVE-2024-52791-matrix-media-repo (MMR) allows a denial of service through memory exhaustion

t2bot/matrix-media-repo · GHSA-gp86-q8hg-fpxj

medium2025-01-16

CVE-2025-23366-HAL Console has a Cross Site Scripting (XSS) vulnerability of user input

hal/console · GHSA-jhvj-f397-8w6q

medium2025-01-16

CVE-2024-36403-matrix-media-repo (MMR) allows denial of service/high operating costs through unauthenticated downloads

t2bot/matrix-media-repo · GHSA-vc2m-hw89-qjxf

medium2025-01-16

CVE-2024-36402-matrix-media-repo (MMR) allows unauthenticated writes to the media repository, which may allow planting of problematic content

t2bot/matrix-media-repo · GHSA-8vmr-h7h5-cqhg

medium2025-01-16

CVE-2024-50633-Indico Insecure Access

indico/indico · GHSA-3wg7-r7q5-r2jf

medium2025-01-16

CVE-2025-23201-Librenms has a reflected XSS on error alert

librenms/librenms · GHSA-g84x-g96g-rcjc

medium2025-01-16

CVE-2025-23200-LibreNMS Misc Section Stored Cross-site Scripting vulnerability

librenms/librenms · GHSA-c66p-64fj-jmc2

medium2025-01-16

CVE-2025-23199-LibreNMS Ports Stored Cross-site Scripting vulnerability

librenms/librenms · GHSA-27vf-3g4f-6jp7

medium2025-01-16

CVE-2025-23198-LibreNMS Display Name Stored Cross-site Scripting vulnerability

librenms/librenms · GHSA-pm8j-3v64-92cq

medium2025-01-16

CVE-2024-5138-CVE-2024-5138: snapd snapctl auth bypass

canonical/snapd · GHSA-p9v8-q5m4-pf46

medium2025-01-16

CVE-2024-56144-LibreNMS Display Name 2 Stored Cross-site Scripting vulnerability

librenms/librenms · GHSA-2f4w-6mc7-4w78

critical2025-01-15

CVE-2025-25286-Crayfish allows Remote Code Execution via Homarus Authorization header

islandora/crayfish · GHSA-mm6v-68qp-f9fw

high2025-01-15

SP1 has missing verifier checks and fiat-shamir observations

succinctlabs/sp1 · GHSA-c873-wfhp-wx5m

critical2025-01-15

CVE-2025-22146-Sentry's improper authentication on SAML SSO process allows user impersonation

getsentry/sentry · GHSA-7pq6-v88g-wf3w