argocd-cli-2.14.10-1.1 on GA media (moderate)

argocd-cli-2.14.10-1.1 on GA media Announcement ID: openSUSE-SU-2025:15006-1 Rating: moderate Cross-References: CVE-2025-29786 CVSS scores: CVE-2025-29786 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2025-29786 SUSE : 8.2...

forgejo-10.0.3-2.1 on GA media (moderate)

forgejo-10.0.3-2.1 on GA media Announcement ID: openSUSE-SU-2025:15001-1 Rating: moderate Cross-References: CVE-2025-3445 CVSS scores: CVE-2025-3445 SUSE : 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:H/A:L Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be...

libmozjs-115-0-115.15.0-5.1 on GA media (moderate)

libmozjs-115-0-115.15.0-5.1 on GA media Announcement ID: openSUSE-SU-2025:15002-1 Rating: moderate Cross-References: CVE-2024-56431 CVSS scores: CVE-2024-56431 SUSE : 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2024-56431 SUSE : 8.2...

subfinder-2.7.0-2.1 on GA media (moderate)

subfinder-2.7.0-2.1 on GA media Announcement ID: openSUSE-SU-2025:15004-1 Rating: moderate Cross-References: CVE-2024-0406 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the subfinder-2.7.0-2...

Moderate: Red Hat Security Advisory: java-17-openjdk security update

An update for java-17-openjdk is now available for Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.6 Telecommunications...

python311-aiohttp-3.11.16-1.1 on GA media (moderate)

python311-aiohttp-3.11.16-1.1 on GA media Announcement ID: openSUSE-SU-2025:14998-1 Rating: moderate Cross-References: CVE-2024-12254 CVSS scores: CVE-2024-12254 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2024-12254 SUSE : 8.7...

govulncheck-vulndb-0.0.20250410T162706-1.1 on GA media (moderate)

govulncheck-vulndb-0.0.20250410T162706-1.1 on GA media Announcement ID: openSUSE-SU-2025:14995-1 Rating: moderate Cross-References: CVE-2025-32386 CVE-2025-32387 CVSS scores: CVE-2025-32386 SUSE : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2025-32386 SUSE : 6.9...

python-lxml-doc-5.3.2-1.1 on GA media (moderate)

python-lxml-doc-5.3.2-1.1 on GA media Announcement ID: openSUSE-SU-2025:14999-1 Rating: moderate Cross-References: CVE-2025-24928 CVSS scores: CVE-2025-24928 SUSE : 6.6 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:L CVE-2025-24928 SUSE : 6.8...

GraphicsMagick-1.3.45-3.1 on GA media (moderate)

GraphicsMagick-1.3.45-3.1 on GA media Announcement ID: openSUSE-SU-2025:14993-1 Rating: moderate Cross-References: CVE-2025-32460 CVSS scores: CVE-2025-32460 SUSE : 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N CVE-2025-32460 SUSE : 5.1...

gitoxide-0.42.0-1.1 on GA media (moderate)

gitoxide-0.42.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:14994-1 Rating: moderate Cross-References: CVE-2025-22620 CVE-2025-31130 Affected Products: openSUSE Tumbleweed An update that solves 2 vulnerabilities can now be installed. Description: These are all security issues fixed in the...

Moderate: Red Hat Security Advisory: expat security update

An update for expat is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

Moderate: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Telecommunications Update Service, and Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as...

rekor-1.3.10-1.1 on GA media (moderate)

rekor-1.3.10-1.1 on GA media Announcement ID: openSUSE-SU-2025:14990-1 Rating: moderate Cross-References: CVE-2023-45288 CVE-2024-6104 CVE-2025-22868 CVE-2025-22869 CVE-2025-27144 CVE-2025-30204 CVSS scores: CVE-2023-45288 SUSE : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2023-45288 SUS...

flannel-0.26.6-1.1 on GA media (moderate)

flannel-0.26.6-1.1 on GA media Announcement ID: openSUSE-SU-2025:14989-1 Rating: moderate Cross-References: CVE-2025-30204 CVSS scores: CVE-2025-30204 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2025-30204 SUSE : 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N...

CVE-2025-32427

Formie is a Craft CMS plugin for creating forms. Prior to 2.1.44, when importing a form from JSON, if the field label or handle contained malicious content, the output wasn't correctly escaped when viewing a preview of what was to be imported. As imports are undertaking primarily by users who hav...

python311-PyJWT-2.10.1-2.1 on GA media (moderate)

python311-PyJWT-2.10.1-2.1 on GA media Announcement ID: openSUSE-SU-2025:14987-1 Rating: moderate Cross-References: CVE-2022-29217 CVSS scores: CVE-2022-29217 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can...

python311-Django-5.1.8-1.1 on GA media (moderate)

python311-Django-5.1.8-1.1 on GA media Announcement ID: openSUSE-SU-2025:14986-1 Rating: moderate Cross-References: CVE-2025-27556 CVSS scores: CVE-2025-27556 SUSE : 5.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can...

CVE-2025-32427 Formie has a XSS vulnerability for importing forms

Formie is a Craft CMS plugin for creating forms. Prior to 2.1.44, when importing a form from JSON, if the field label or handle contained malicious content, the output wasn't correctly escaped when viewing a preview of what was to be imported. As imports are undertaking primarily by users who hav...

CVE-2025-32427

CVE-2025-32427 concerns the verbb/formie Craft CMS plugin. Before version 2.1.44, importing a form from JSON could leak XSS if a field label or handle contained malicious content, because the preview output was not properly escaped. The vulnerability requires intentional tampering with the JSON e...

WordPress Restrict User Registration plugin <= 1.0.1 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by Abdi Pranata in WordPress Plugin Restrict User Registration versions = 1.0.1...