CVE-2025-60541

CVE-2025-60541 describes a Server-Side Request Forgery (SSRF) in the linshenkx prompt-optimizer, affecting versions 1.3.0 through 1.4.2. The vulnerability resides in the /api/proxy/ component and enables an attacker to scan internal resources via a crafted request. Public sources (NVD/Red Hat/EUV...

CVE-2025-60541

A Server-Side Request Forgery SSRF in the /api/proxy/ component of linshenkx prompt-optimizer v1.3.0 to v1.4.2 allows attackers to scan internal resources via a crafted request...

Security update for aws-efs-utils

This update for aws-efs-utils fixes the following issues: Update to version 2.3.3 bsc1240044. Security issues fixed: CVE-2025-55159: slab: incorrect bounds check in getdisjointmut function can lead to potential crash due to out-of-bounds access bsc1248055. CVE-2020-35881: traitobject: log4rs:...

SUSE-SU-2025:3954-1 Security update for aws-efs-utils

This update for aws-efs-utils fixes the following issues: Update to version 2.3.3 bsc1240044. Security issues fixed: - CVE-2025-55159: slab: incorrect bounds check in getdisjointmut function can lead to potential crash due to out-of-bounds access bsc1248055. - CVE-2020-35881: traitobject: log4rs:...

CLSA-2025-1762337525 Fix CVE(s): CVE-2022-42898

SECURITY UPDATE: integer overflow in PAC parsing - debian/patches/CVE-2022-42898.patch: catch overflows that result from adding PACINFOBUFFERSIZE - CVE-2022-42898...

Use-After-Free

github.com/envoyproxy/envoy is vulnerable to a Use-After-Free. The vulnerability is due to improper handling of DNS cache operations in the Dynamic Forward Proxy implementation, where a completion callback can trigger new or remove existing DNS resolutions, which allows an attacker to cause...

CVE-2025-50735

Directory traversal vulnerability in NextChat thru 2.16.0 due to the WebDAV proxy failing to canonicalize or reject dot path segments in its catch-all route, allowing attackers to gain sensitive information via authenticated or anonymous WebDAV endpoints...

[SECURITY] [DSA 6048-1] ruby-rack security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6048-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff November 03, 2025 https://www.debian.org/security/faq -...

EUVD-2025-37512

Directory traversal vulnerability in NextChat thru 2.16.0 due to the WebDAV proxy failing to canonicalize or reject dot path segments in its catch-all route, allowing attackers to gain sensitive information via authenticated or anonymous WebDAV endpoints...

Important: Red Hat Security Advisory: squid:4 security update

An update for the squid:4 module is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability...

NextChat 安全漏洞

NextChat is a NextChat open source project for rapid deployment of private ChatGPT web applications. A security vulnerability exists in NextChat 2.16.0 and earlier versions, which stems from a WebDAV proxy failing to normalize or reject point path segments in its wildcard routes, which could lead...

PT-2025-44793

Name of the Vulnerable Software and Affected Versions NextChat versions through 2.16.0 Description A directory traversal issue exists in NextChat due to the WebDAV proxy not properly handling dot path segments within its catch-all route. This allows attackers to potentially access sensitive...

CVE-2025-50735

Directory traversal vulnerability in NextChat thru 2.16.0 due to the WebDAV proxy failing to canonicalize or reject dot path segments in its catch-all route, allowing attackers to gain sensitive information via authenticated or anonymous WebDAV endpoints...

CVE-2025-50735

Directory traversal vulnerability in NextChat thru 2.16.0 due to the WebDAV proxy failing to canonicalize or reject dot path segments in its catch-all route, allowing attackers to gain sensitive information via authenticated or anonymous WebDAV endpoints...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: govulncheck, yunikorn-web, ctop, mkcert, litefs, kubernetes-csi-external-attacher, prometheus-adapter, wireguard-go, azure-workload-identity-webhook, prometheus-pushgateway, thanos-operator, capslock, mockery, fulcio, timescaledb-parallel-copy, sonobuoy, slsa-verifie...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: govulncheck, crossplane, cri-tools, vault-secrets-webhook, spiffe-helper, ini-file, aws-sigv4-proxy, opensearch-k8s-operator, ctop, oras, yunikorn-web, vault-k8s, harbor-registry, ghaudit, gops, kubeflow-katib, sbom-scorecard, mkcert, kuberlr, velero-plugin-for-aws,...

CVE-2025-47912 vulnerabilities

Vulnerabilities for packages: govulncheck, crossplane, cri-tools, vault-secrets-webhook, spiffe-helper, ini-file, aws-sigv4-proxy, opensearch-k8s-operator, ctop, oras, yunikorn-web, vault-k8s, harbor-registry, ghaudit, gops, kubeflow-katib, sbom-scorecard, mkcert, kuberlr, velero-plugin-for-aws,...

CVE-2025-61723 vulnerabilities

Vulnerabilities for packages: govulncheck, crossplane, cri-tools, vault-secrets-webhook, spiffe-helper, ini-file, aws-sigv4-proxy, opensearch-k8s-operator, ctop, oras, yunikorn-web, vault-k8s, harbor-registry, ghaudit, gops, kubeflow-katib, sbom-scorecard, mkcert, kuberlr, velero-plugin-for-aws,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: govulncheck, crossplane, cri-tools, vault-secrets-webhook, spiffe-helper, ini-file, aws-sigv4-proxy, opensearch-k8s-operator, ctop, oras, yunikorn-web, vault-k8s, harbor-registry, ghaudit, gops, kubeflow-katib, sbom-scorecard, mkcert, kuberlr, velero-plugin-for-aws,...

GHSA-QH38-484V-W52X vulnerabilities

Vulnerabilities for packages: govulncheck, crossplane, cri-tools, vault-secrets-webhook, spiffe-helper, ini-file, aws-sigv4-proxy, opensearch-k8s-operator, ctop, oras, yunikorn-web, vault-k8s, harbor-registry, ghaudit, gops, kubeflow-katib, sbom-scorecard, mkcert, kuberlr, velero-plugin-for-aws,...