Security advisories

medium2025-01-15

CVE-2023-0482-Insecure Temporary File in RESTEasy

resteasy/resteasy · GHSA-2c6g-pfx3-w7h8

medium2025-01-15

CVE-2025-20086-Mattermost fails to properly validate post props

mattermost/mattermost · GHSA-5m7j-6gc4-ff5g

medium2025-01-15

CVE-2025-20088-Mattermost fails to properly validate post props

mattermost/mattermost · GHSA-45v9-w9fh-33j6

medium2025-01-15

CVE-2025-21088-Mattermost Incorrect Type Conversion or Cast

mattermost/mattermost · GHSA-8j3q-gc9x-7972

critical2025-01-15

CVE-2025-23061-Mongoose search injection vulnerability

automattic/mongoose · GHSA-vg7j-7cwx-8wgw

low2025-01-14

Silverstripe Framework has a Reflected Cross Site Scripting (XSS) in error message

silverstripe/silverstripe-framework · GHSA-mqf3-qpc3-g26q

medium2025-01-14

CVE-2024-53277-Silverstripe Framework has a XSS in form messages

silverstripe/silverstripe-framework · GHSA-ff6q-3c9c-6cf5

medium2025-01-14

CVE-2024-47605-Silverstripe Framework has a XSS via insert media remote file oembed

silverstripe/silverstripe-framework · GHSA-7cmp-cgg8-4c82

low2025-01-14

Lodestar snappy checksum issue

chainsafe/lodestar · GHSA-m9c9-mc2h-9wjw

low2025-01-14

Lodestar snappy decompression issue

chainsafe/lodestar · GHSA-53rv-hcvm-rpp9

high2025-01-14

CVE-2024-52281-Rancher UI has Stored Cross-site Scripting vulnerability

rancher/rancher · GHSA-2v2w-8v8c-wcm9

medium2025-01-14

CVE-2024-56374-Django has a potential denial-of-service vulnerability in IPv6 validation

django/django · GHSA-qcgg-j2x8-h9g8

high2025-01-14

CVE-2024-53263-Git LFS permits exfiltration of credentials via crafted HTTP URLs

git-lfs/git-lfs · GHSA-q6r2-x2cc-vrp7

high2025-01-14

CVE-2025-21176-Microsoft Security Advisory CVE-2025-21176 | .NET and Visual Studio Remote Code Execution Vulnerability

dotnet/runtime · GHSA-gjf6-3w4p-7xfh

high2025-01-14

CVE-2025-21172-Microsoft Security Advisory CVE-2025-21172 | .NET and Visual Studio Remote Code Execution Vulnerability

dotnet/runtime · GHSA-jjcv-wr2g-4rv4

high2025-01-14

CVE-2025-21171-Microsoft Security Advisory CVE-2025-21171 | .NET Remote Code Execution Vulnerability

dotnet/runtime · GHSA-p54p-p3qm-8vgj

high2025-01-14

CVE-2024-50338-Git Credential Manager carriage-return character in remote URL allows malicious repository to leak credentials

git-ecosystem/git-credential-manager · GHSA-86c2-4x57-wc8g

medium2025-01-14

CVE-2025-23081-Mediawiki - DataTransfer Extension Cross-Site Request Forgery (CSRF) and Cross-site Scripting (XSS)

wikimedia/mediawiki-extensions-datatransfer · GHSA-c3h5-h73c-29hq

medium2025-01-14

CVE-2024-45627-Apache Linkis Metadata Query Service JDBC: JDBC Datasource Module with Mysql has file read vulnerability

apache/linkis · GHSA-8cvq-3jjp-ph9p

low2025-01-14

CVE-2025-21607-Vyper Does Not Check the Success of Certain Precompile Calls

vyperlang/vyper · GHSA-vgf2-gvx8-xwc3