Security advisories

critical2025-01-14

CVE-2025-23042-Gradio Blocked Path ACL Bypass Vulnerability

gradio-app/gradio · GHSA-j2jg-fq62-7c3h

low2025-01-14

CVE-2025-0343-CVE-2025-0343: Swift ASN.1 can crash when parsing maliciously formed BER/DER

apple/swift-asn1 · GHSA-w8xv-rwgf-4fwh

critical2025-01-14

CVE-2025-23025-XWiki Realtime WYSIWYG Editor extension allows privilege escalation (PR) through realtime WYSIWYG editing

xwiki/xwiki-platform · GHSA-rmm7-r7wr-xpfg

critical2025-01-14

CVE-2024-49375-Rasa Allows Remote Code Execution via Remote Model Loading

rasahq/rasa · GHSA-cpv4-ggrr-7j9v

medium2025-01-14

CVE-2024-55945-TYPO3 DB Check Module vulnerable to Cross-Site Request Forgery

typo3-cms/lowlevel · GHSA-8mv3-37rc-pvxj

high2025-01-14

CVE-2024-55924-TYPO3 Scheduler Module vulnerable to Cross-Site Request Forgery

typo3-cms/scheduler · GHSA-7835-fcv3-g256

medium2025-01-14

CVE-2024-55923-TYPO3 Indexed Search Module vulnerable to Cross-Site Request Forgery

typo3-cms/indexed_search · GHSA-7r5q-4qgx-v545

medium2025-01-14

CVE-2024-55922-TYPO3 Form Framework Module vulnerable to Cross-Site Request Forgery

typo3-cms/form · GHSA-ww7h-g2qf-7xv6

high2025-01-14

CVE-2024-55921-TYPO3 Extension Manager Module vulnerable to Cross-Site Request Forgery

typo3-cms/extensionmanager · GHSA-4g52-pq8j-6qv5

medium2025-01-14

CVE-2024-55920-TYPO3 Cross-Site Request Forgery in Dashboard Module

typo3-cms/dashboard · GHSA-qwx7-39pw-2mhr

medium2025-01-14

CVE-2024-55894-TYPO3 Cross-Site Request Forgery in Backend User Module

typo3-cms/beuser · GHSA-6w4x-gcx3-8p7v

medium2025-01-14

CVE-2024-55893-TYPO3 Cross-Site Request Forgery in Log Module

typo3-cms/belog · GHSA-cjfr-9f5r-3q93

medium2025-01-14

CVE-2024-55892-TYPO3 Potential Open Redirect via Parsing Differences

typo3/typo3 · GHSA-2fx5-pggv-6jjr

low2025-01-14

CVE-2024-55891-TYPO3 Information Disclosure via Exception Handling/Logger

typo3-cms/install · GHSA-38x7-cc6w-j27q

medium2025-01-13

CVE-2024-56323-OpenFGA Authorization Bypass

openfga/openfga · GHSA-32q6-rr98-cjqv

medium2025-01-13

CVE-2024-11734-Denial of Service in Keycloak Server via Security Headers

keycloak/keycloak · GHSA-w3g8-r9gw-qrh8

medium2025-01-13

CVE-2024-11736-Keycloak allows unrestricted admin use of system and environment variables

keycloak/keycloak · GHSA-f4v7-3mww-9gc2

medium2025-01-13

CVE-2025-23026-jte's HTML templates containing Javascript template strings are subject to XSS

casid/jte · GHSA-vh22-6c6h-rm8q

low2025-01-13

The Umbraco Heartcore headless client library uses a vulnerable Refit dependency package

umbraco/umbraco.headless.client.net · GHSA-mgr7-5782-6jh9

medium2025-01-13

CVE-2024-56138-notation-go's timestamp signature generation lacks certificate revocation check

notaryproject/notation-go · GHSA-45v3-38pc-874v