agentengine-sdk-python (>=0.2.0 <=0.4.0), agentic-chat-ui (>=0.1.0 <=0.2.4) +45 more potentially affected by CVE-2025-68492 via chainlit (>=1.0.0 <=2.6.3)

chainlit PYPI version =1.0.0, =0.2.0, =0.1.0, =0.3.0, =0.0.3, =0.14.0, =0.0.0, =0.1.1, =0.1.1, =0.1.0, =0.1.0, =0.1.0, =1.0.0, =0.1.0, =0.1.2 and more Source cves: CVE-2025-68492 Source advisory: OSV:GHSA-V492-6XX2-P57G...

WordPress Unicamp Theme <= 2.6.3 is vulnerable to Local File Inclusion

Software Unicamp Type Theme Vulnerable versions = 2.6.3 Fixed in 2.6.4 OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-54701 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID d3f80f36b08b Credits Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity...

PT-2025-33253

Name of the Vulnerable Software and Affected Versions: ThemeMove Unicamp versions through 2.6.3 Description: This issue involves an improper control of filename for include/require statements in a PHP program, leading to a PHP Local File Inclusion. Recommendations: Update ThemeMove Unicamp to a...

acryl-datahub-airflow-plugin (>=0.10.5.2rc3 <=0.11.0rc1), airflow-clickhouse-plugin (>=0.11.0 <=1.1.0rc2) +11 more potentially affected by CVE-2023-47265 via apache-airflow (>=2.6.3 <=2.8.0)

apache-airflow PYPI version =2.6.3, =0.10.5.2rc3, =0.11.0, =0.3.1, =0.0.1a0, =1.0.0rc1, =0.1.30, =0.0.1, =0.1.0, =1.2.0, =1.3.4, =1.3.5 Source cves: CVE-2023-47265 Source advisory: OSV:GHSA-PXCH-WR7M-RWXJ...

CVE-2022-23565

Tensorflow is an Open Source Machine Learning Framework. An attacker can trigger denial of service via assertion failure by altering a SavedModel on disk such that AttrDefs of some operation are duplicated. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on...