32162 matches found
CVE-2025-8191
A vulnerability, which was classified as problematic, was found in macrozheng mall up to 1.0.3. Affected is an unknown function of the file /swagger-ui/index.html of the component Swagger UI. The manipulation of the argument configUrl leads to cross site scripting. It is possible to launch the...
CVE-2025-29534
creationtimestamp| type| source ---|---|--- 2025-07-26 10:37:48+00:00| seen| https://gist.github.com/EmptyButter/976f58ed1cc33616401d435c965053e2 2025-07-26 10:42:14+00:00| seen| https://gist.github.com/EmptyButter/19b2c626f4589d1f9d4478632205a9eb 2025-07-28 23:23:11+00:00| seen|...
CVE-2025-54416
tj-actions/branch-names is a Github actions repository that contains workflows to retrieve branch or tag names with support for all events. In versions 8.2.1 and below, a critical vulnerability has been identified in the tj-actions/branch-names' GitHub Action workflow which allows arbitrary comma...
CVE-2025-54415
dag-factory is a library for Apache Airflow® to construct DAGs declaratively via configuration files. In versions 0.23.0a8 and below, a high-severity vulnerability has been identified in the cicd.yml workflow within the astronomer/dag-factory GitHub repository. The workflow, specifically when...
CVE-2025-54416 tj-actions/branch-names Contains Command Injection Vulnerability
tj-actions/branch-names is a Github actions repository that contains workflows to retrieve branch or tag names with support for all events. In versions 8.2.1 and below, a critical vulnerability has been identified in the tj-actions/branch-names' GitHub Action workflow which allows arbitrary comma...
CVE-2025-54416 tj-actions/branch-names Contains Command Injection Vulnerability
tj-actions/branch-names is a Github actions repository that contains workflows to retrieve branch or tag names with support for all events. In versions 8.2.1 and below, a critical vulnerability has been identified in the tj-actions/branch-names' GitHub Action workflow which allows arbitrary comma...
CVE-2025-54416
CVE-2025-54416 – tj-actions/branch-names has a concrete command-injection flaw in the GitHub Action outputs. The vulnerability stems from unsafe use of the pattern echo "... $(eval printf "%s" …)" to populate GITHUB_OUTPUT, allowing an attacker-controlled branch or tag name to inject commands dow...
CVE-2025-54416 tj-actions/branch-names Contains Command Injection Vulnerability
tj-actions/branch-names is a Github actions repository that contains workflows to retrieve branch or tag names with support for all events. In versions 8.2.1 and below, a critical vulnerability has been identified in the tj-actions/branch-names' GitHub Action workflow which allows arbitrary comma...
CVE-2025-54415 dag-factory's CI/CD Workflow Allows for Repository Takeover and Secret Exfiltration
dag-factory is a library for Apache Airflow® to construct DAGs declaratively via configuration files. In versions 0.23.0a8 and below, a high-severity vulnerability has been identified in the cicd.yml workflow within the astronomer/dag-factory GitHub repository. The workflow, specifically when...
CVE-2025-54415
CVE-2025-54415 affects the dag-factory project (Apache Airflow) for versions ≤ 0.23.0a8. The vulnerability lies in the cicd.yml workflow configured in the astronomer/dag-factory GitHub repository, which, when triggered by pull_request_target, can be exploited to execute arbitrary code in the GitH...
CVE-2025-54415 dag-factory's CI/CD Workflow Allows for Repository Takeover and Secret Exfiltration
dag-factory is a library for Apache Airflow® to construct DAGs declaratively via configuration files. In versions 0.23.0a8 and below, a high-severity vulnerability has been identified in the cicd.yml workflow within the astronomer/dag-factory GitHub repository. The workflow, specifically when...
CVE-2025-45150
creationtimestamp| type| source ---|---|--- 2025-07-26 03:24:41+00:00| seen| https://gist.github.com/ycshao12/69a48551cc6c9cc69153d137afe9ecef...
PT-2025-30952 · Unknown · Apache Airflow +1
Name of the Vulnerable Software and Affected Versions: dag-factory versions 0.23.0a8 and below Description: dag-factory is a library for Apache Airflow® used to construct DAGs declaratively via configuration files. A high-severity issue exists in the cicd.yml workflow within the...
GHSA-GQ52-6PHF-X2R6 tj-actions/branch-names has a Command Injection Vulnerability
Overview A critical vulnerability has been identified in the tj-actions/branch-names GitHub Action workflow which allows arbitrary command execution in downstream workflows. This issue arises due to inconsistent input sanitization and unescaped output, enabling malicious actors to exploit special...
tj-actions/branch-names has a Command Injection Vulnerability
Overview A critical vulnerability has been identified in the tj-actions/branch-names GitHub Action workflow which allows arbitrary command execution in downstream workflows. This issue arises due to inconsistent input sanitization and unescaped output, enabling malicious actors to exploit special...
GHSA-8HC4-VH64-CXMJ
creationtimestamp| type| source ---|---|--- 2025-07-25 17:22:08+00:00| seen| https://gist.github.com/jporzucek/063a1bfdceba2cb9dbbdc9dfbbef6ef5 2026-01-24 21:24:31+00:00| seen| https://gist.github.com/alon710/1d19d243e6bf504868628ee2d5498eb0 2026-01-24 22:31:28+00:00| seen|...
GHSA-WF5P-G6VW-RHXX
creationtimestamp| type| source ---|---|--- 2025-07-25 17:22:08+00:00| seen| https://gist.github.com/jporzucek/063a1bfdceba2cb9dbbdc9dfbbef6ef5...
CVE-2025-54413
creationtimestamp| type| source ---|---|--- 2025-07-25 16:59:07+00:00| published-proof-of-concept| https://github.com/skops-dev/skops/security/advisories/GHSA-4v6w-xpmh-gfgp...
CVE-2025-52187
creationtimestamp| type| source ---|---|--- 2025-07-22 10:06:06+00:00| seen| https://gist.github.com/sanjay70023/67c698a4c88cc9000a127c02850a3915 2025-07-30 03:55:38+00:00| seen| https://bsky.app/profile/nimblenerd.social/post/3lv5pzoimw32a 2025-07-30 21:32:14+00:00| seen|...