CVE-2025-68917: Improper Neutralization of Input During Web Page Generation

ONLYOFFICE Docs before 9.2.1 allows XSS in the textarea of the comment editing form. This is related to DocumentServer...

ONLYOFFICE Docs 跨站脚本漏洞

ONLYOFFICE Docs is an online office software from ONLYOFFICE, Inc. A cross-site scripting vulnerability exists in ONLYOFFICE Docs versions prior to 9.2.1, which stems from cross-site scripting in the textarea of the comment edit form...

Malicious Package

Overview secure-docs-app is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this this package'...

Malicious code in hiro-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88d9fa34d301fc54a2088114411b7016fb25c8f3b581c52f9e0613b103edda15 The package hiro-docs was found to contain malicious code...

MAL-2025-192801 Malicious code in hiro-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88d9fa34d301fc54a2088114411b7016fb25c8f3b581c52f9e0613b103edda15 The package hiro-docs was found to contain malicious code...

Fedora: Security Advisory (FEDORA-2025-7ec743931c)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security update for golang-github-prometheus-alertmanager

This update for golang-github-prometheus-alertmanager fixes the following issues: Update to version 0.28.1 jscPED-13285: Improved performance of inhibition rules when using Equal labels. Improve the documentation on escaping in UTF-8 matchers. Update alertmanagerconfighash metric help to document...

[SECURITY] Fedora 43 Update: python3.13-3.13.11-1.fc43

Python 3.13 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3.13 package provides the "python3.13" executable:...

[SECURITY] Fedora 43 Update: python3-docs-3.14.2-1.fc43

The python3-docs package contains documentation on the Python 3 programming language and interpreter...

Malicious code in leafygreen-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59f7fae370136d1686b52bfce441170148b5370d9bc737f0426895d826f2933e The package leafygreen-docs was found to contain malicious code...

MAL-2025-191515 Malicious code in leafygreen-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59f7fae370136d1686b52bfce441170148b5370d9bc737f0426895d826f2933e The package leafygreen-docs was found to contain malicious code...

EUVD-2025-200054

Malicious code in leafygreen-docs npm...

Important: Red Hat Security Advisory: Red Hat Developer Hub 1.7.3 release.

Red Hat Developer Hub 1.7.3 has been released. Red Hat Developer Hub RHDH is Red Hat's enterprise-grade, self-managed, customizable developer portal based on Backstage.io. RHDH is supported on OpenShift and other major Kubernetes clusters AKS, EKS, GKE. The core features of RHDH include a single...

CVE-2025-13507 Time-series operations may cause internal BSON size limit to be exceed

Inconsistent object size validation in time series processing logic may result in later processing of oversized BSON documents leading to an assert failing and process termination. This issue impacts MongoDB Server v7.0 versions prior to 7.0.26, v8.0 versions prior to 8.0.16 and MongoDB server v8...

Malicious code in @browserbasehq/stagehand-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba1d760d2f3ab2322b527554b05f55f9d8ceb73868da963ea4d060a1a5a5134f The package @browserbasehq/stagehand-docs was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-199335

Malicious code in @browserbasehq/stagehand-docs npm...

This Week in Spring - Spring Boot 4 edition! - November 25th, 2025

Hi, Spring fans! Welcome to another illustrious installment of This Week in Spring! It’s Thanksgiving week here in the United States. Thanksgiving is traditionally celebrated with friends and family every fourth Thursday of November, gathered around a table full of food and, usually, a giant...

ONLYOFFICE Docs 信任管理问题漏洞

ONLYOFFICE Docs is an online office software from ONLYOFFICE, Inc. A trust management issue vulnerability exists in ONLYOFFICE Docs versions 22.11 through prior to 25.05 and prior to 25.11, which stems from the use of a hard-coded key to protect the file cache, which could lead to accessing known...

CVE-2025-64308

The Brightpick Mission Control web application exposes hardcoded credentials in its client-side JavaScript bundle to Brightpick AI's documentation portal...

PT-2025-53412

Name of the Vulnerable Software and Affected Versions ONLYOFFICE Docs versions prior to 9.2.1 Description ONLYOFFICE Docs contains a flaw that allows for Cross-Site Scripting XSS through the Color theme name within DocumentServer. Recommendations Update to version 9.2.1 or later...