flowui-project (>=0.0.1, <=0.0.13) potentially affected by CVE-2023-25956 via apache-airflow-providers-amazon (4.0.0)

apache-airflow-providers-amazon PYPI version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow-providers-amazon and may be impacted: - flowui-project =0.0.1, =0.0.13 Source cves: CVE-2023-25956 Source advisory: OSV:PYSEC-2026-771...

airflow-providers (>=0.1.0, <=0.3.0) potentially affected by CVE-2023-25956 via apache-airflow-providers-amazon (5.1.0)

apache-airflow-providers-amazon PYPI version 5.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow-providers-amazon and may be impacted: - airflow-providers =0.1.0, =0.3.0 Source cves: CVE-2023-25956 Source advisory: OSV:PYSEC-2026-771...

CVE-2026-25956

Frappe is a full-stack web application framework. Prior to 14.99.14 and 15.94.0, an attacker could craft a malicious signup URL for a frappe site which could lead to an open redirect or reflected XSS, depending on the crafted payload when a user signs up. This vulnerability is fixed in 14.99.14 a...

CVE-2024-25956

Dell Grab for Windows, versions 5.0.4 and below, contains an improper file permissions vulnerability. A locally authenticated attacker could potentially exploit this vulnerability, leading to the information disclosure of certain system information...

CVE-2023-25956

creationtimestamp| type| source ---|---|--- 2023-02-24 14:49:21+00:00| seen| https://t.me/cibsecurity/58868 2023-02-24 21:27:53+00:00| seen| Telegram/Lw7u-Xk6xSteuBiwyNzWX2LNGzfySroFN8WyCw6GBv2i6to...

airflow-providers (>=0.1.0, <=0.3.0) potentially affected by CVE-2023-25956 via apache-airflow-providers-amazon (5.1.0)

apache-airflow-providers-amazon PYPI version 5.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow-providers-amazon and may be impacted: - airflow-providers =0.1.0, =0.3.0 Source cves: CVE-2023-25956 Source advisory: OSV:GHSA-W695-P3J5-H...

apache-liminal (>=0.0.4rc1, <=0.0.5), apache-liminal-zion (>=0.0.0, <=2.0.0) +1 more potentially affected by CVE-2023-25956 via apache-airflow-providers-amazon (1.4.0)

apache-airflow-providers-amazon PYPI version 1.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow-providers-amazon and may be impacted: - apache-liminal =0.0.4rc1, =0.0.0, =2.0.0 - example-pkg-naturalett 14.7.0 Source cves: CVE-2023-259...

flowui-project (>=0.0.1, <=0.0.13) potentially affected by CVE-2023-25956 via apache-airflow-providers-amazon (4.0.0)

apache-airflow-providers-amazon PYPI version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow-providers-amazon and may be impacted: - flowui-project =0.0.1, =0.0.13 Source cves: CVE-2023-25956 Source advisory: OSV:GHSA-W695-P3J5-HRJ...

CVE-2023-25956

Generation of Error Message Containing Sensitive Information vulnerability in the Apache Airflow AWS Provider. This issue affects Apache Airflow AWS Provider versions before 7.2.1...

CVE-2023-25956

The CVE-2023-25956 issue is a vulnerability in the Apache Airflow AWS Provider (pre-7.2.1) described as a generation of an error message that contains sensitive information, leading to information disclosure. Multiple connected sources corroborate affected versions (

airflow-add-ons (>=0.2.9b1, <=0.2.9b2), airflow-poetry-test (>=0.1.0, <=0.1.2) +5 more potentially affected by CVE-2023-25956 via apache-airflow-providers-amazon (>=1.4.0, <=5.1.0)

apache-airflow-providers-amazon PYPI version =1.4.0, =0.2.9b1, =0.1.0, =0.1.0, =0.0.4rc1, =0.0.0, =14.4.0, =0.0.1, =0.0.13 Source cves: CVE-2023-25956 Source advisory: MEND:CVE-2023-25956...

CVE-2021-25956

creationtimestamp| type| source ---|---|--- 2021-08-17 18:15:47+00:00| seen| https://t.me/cibsecurity/27426...

CVE-2021-25956

Dolibarr vulnerability CVE-2021-25956 affects Dolibarr versions 3.3.beta1_20121221 through 13.0.2. The issue arises when admin users with Modify access can change other users’ details but the system fails to validate an existing Login name during renaming, allowing the password for a similarly na...