CVE-2025-61723 vulnerabilities

Vulnerabilities for packages: skopeo, mesosphere-vsphere-csi, cloud-provider-gcp-cloud-controller-manager, docker-credential-acr-env, cert-manager-cmctl, ip-masq-agent, kube-bench, policy-controller, promxy, xcover, hydra, php-fpmexporter, spicedb-operator, gosu, ko, velero-plugin-for-aws,...

GHSA-7WWX-XJ66-R44X vulnerabilities

Vulnerabilities for packages: skopeo, mesosphere-vsphere-csi, cloud-provider-gcp-cloud-controller-manager, docker-credential-acr-env, cert-manager-cmctl, ip-masq-agent, kube-bench, policy-controller, promxy, xcover, hydra, php-fpmexporter, spicedb-operator, gosu, ko, velero-plugin-for-aws,...

Security update for afterburn

This update for afterburn fixes the following issues: Update to version 5.9.0.git21.a73f509. Security issues fixed: CVE-2022-24713: regex: no proper complexity limitation when parsing untrusted regular expressions with large repetitions on empty sub-expressions can lead to excessive resource...

Security update for afterburn

This update for afterburn fixes the following issues: Update to version 5.9.0.git21.a73f509. Security issues fixed: CVE-2022-24713: regex: no proper complexity limitation when parsing untrusted regular expressions with large repetitions on empty sub-expressions can lead to excessive resource...

cargo-kconfig (0.0.1), cli-todo (>=0.2.0, <=0.7.0) potentially affected by unknown CVE via ncurses (6.0.1)

ncurses CARGO version 6.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on ncurses and may be impacted: - cargo-kconfig 0.0.1 - cli-todo =0.2.0, =0.7.0 Source cves: unknown CVE Source advisory: OSV:GHSA-X77X-7MMH-CXV3...

cargo-audit-advisory-db-20251021-1.1 on GA media (moderate)

cargo-audit-advisory-db-20251021-1.1 on GA media Announcement ID: openSUSE-SU-2025:15652-1 Rating: moderate Cross-References: CVE-2025-62370 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...

apple-opensource-downloader (0.1.0), async_bagit (>=0.1.0, <=0.2.0) +14 more potentially affected by CVE-2025-62518 via tokio-tar (0.3.1)

tokio-tar CARGO version 0.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on tokio-tar and may be impacted: - apple-opensource-downloader 0.1.0 - asyncbagit =0.1.0, =0.1.8, =0.8.0, =0.7.0, =0.2.0, =0.0.0, =0.1.0, =0.2.5, =0.4.0, =0.2.14, =0.6.0,...

OPENSUSE-SU-2025:15652-1 cargo-audit-advisory-db-20251021-1.1 on GA media

These are all security issues fixed in the cargo-audit-advisory-db-20251021-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2025-62655

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in The Wikimedia Foundation MediaWiki Cargo extension allows SQL Injection.This issue affects MediaWiki Cargo extension: 1.39, 1.43, 1.44...

CVE-2025-62671

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation Mediawiki - Cargo Extension allows Stored XSS.This issue affects Mediawiki - Cargo Extension: master...

aocleaderboard (>=0.1.0, <=0.6.1), archetect (>=0.5.0, <=0.7.3) +94 more potentially affected by unknown CVE via unic-segment (>=0.7.0, <=0.9.0)

unic-segment CARGO version =0.7.0, =0.1.0, =0.5.0, =0.5.0, =1.0.0, =0.1.0, =0.0.4, =0.1.0, =0.2.6, =0.0.15, =0.1.0, =0.1.3, =0.2.1, =0.1.2-beta, =0.1.8 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0074...

actix-plus-auth (0.0.1), actix-plus-utils (0.1.0) +322 more potentially affected by unknown CVE via unic-common (>=0.7.0, <=0.9.0)

unic-common CARGO version =0.7.0, =0.1.2, =0.1.0, =0.3.0, =0.1.0, =0.5.0, =0.5.0, =0.1.0-alpha.4, =0.3.0, =1.0.0, =1.0.5 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0080...

unic (>=0.5.0, <=0.6.0), unic-bidi (0.6.0) +12 more potentially affected by unknown CVE via unic-utils (>=0.5.0, <=0.6.0)

unic-utils CARGO version =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.6.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0091...

bootstring (0.1.0), deltachat_message_parser (>=0.3.0, <=0.14.1) +8 more potentially affected by unknown CVE via unic-idna-punycode (>=0.1.1, <=0.9.0)

unic-idna-punycode CARGO version =0.1.1, =0.3.0, =0.3.0, =0.2.4-beta, =0.3.0, =0.1.0, =0.1.0, =0.5.0, =0.7.0, =0.1.1, =0.9.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0088...

alemat (>=0.3.0, <=0.8.0), box-bin (0.3.1) +29 more potentially affected by unknown CVE via unic-ucd-hangul (>=0.8.0, <=0.9.0)

unic-ucd-hangul CARGO version =0.8.0, =0.3.0, =0.3.0, =0.0.0, =0.2.4-beta, =0.0.102, =0.0.7, =0.0.1, =1.0.0, =1.11.3, =0.0.0, =0.0.111 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0079...

actix-plus-auth (0.0.1), actix-plus-utils (0.1.0) +321 more potentially affected by unknown CVE via unic-char-property (>=0.6.0, <=0.9.0)

unic-char-property CARGO version =0.6.0, =0.1.2, =0.1.0, =0.3.0, =0.1.0, =0.5.0, =0.5.0, =0.1.0-alpha.4, =0.3.0, =1.0.0, =1.0.5 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0081...

alemat (>=0.3.0, <=0.8.0), box-bin (0.3.1) +20 more potentially affected by unknown CVE via unic-ucd-case (>=0.6.0, <=0.9.0)

unic-ucd-case CARGO version =0.6.0, =0.3.0, =0.3.0, =0.0.0, =0.0.102, =0.0.7, =0.0.1, =1.0.0, =1.11.3, =0.1.0, =0.1.0, =0.0.0, =0.1.0, =0.1.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0092...

actix-plus-auth (0.0.1), actix-plus-utils (0.1.0) +45 more potentially affected by unknown CVE via unic-ucd-category (>=0.5.0, <=0.9.0)

unic-ucd-category CARGO version =0.5.0, =0.3.0, =0.3.0, =0.2.0, =0.0.0, =0.0.102, =0.1.0, =0.0.7, =1.0.0, =0.0.1, =1.0.0 - if 0.0.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0094...

Cargo Mediawiki Extension vulnerable to Cross-site Scripting

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation Mediawiki - Cargo Extension allows Stored XSS. This issue affects Mediawiki - Cargo Extension befor 3.8.3...

GHSA-GR6V-3PMP-996P Cargo Mediawiki Extension vulnerable to Cross-site Scripting

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation Mediawiki - Cargo Extension allows Stored XSS. This issue affects Mediawiki - Cargo Extension befor 3.8.3...