CVE-2025-61788: Improper Neutralization of Input During Web Page Generation

Opencast is a free, open-source platform to support the management of educational audio and video content. Prior to Opencast 17.8 and 18.2, the paella would include and render some user inputs metadata like title, description, etc. unfiltered and unmodified. The vulnerability allows attackers to...

CVE-2025-61906: Exposure of Sensitive Information to an Unauthorized Actor

Opencast is a free, open-source platform to support the management of educational audio and video content. Prior to Opencast 17.8 and 18.2, in some situations, Opencast's editor may publish a video without notifying the user. This may lead to users accidentally publishing media not meant for...

EUVD-2020-1477

Malware in sbrugna...

EUVD-2021-2538

Malware in sbrugna...

EUVD-2021-1301

Malware in sbrugna...

EUVD-2020-0270

Malware in sbrugna...

EUVD-2020-0261

Malware in sbrugna...

EUVD-2020-0248

Malware in sbrugna...

EUVD-2021-2446

Malware in sbrugna...

EUVD-2020-0279

Malware in sbrugna...

EUVD-2020-0278

Malware in sbrugna...

EUVD-2025-26216

Malicious code in bioql PyPI...

EUVD-2022-4233

Malicious code in bioql PyPI...

EUVD-2022-5043

Malicious code in bioql PyPI...

EUVD-2024-3366

Malicious code in bioql PyPI...

EUVD-2022-7416

Malicious code in bioql PyPI...

EUVD-2021-8667

Malicious code in bioql PyPI...

EUVD-2022-4995

Malicious code in bioql PyPI...

Path Traversal

org.opencastproject, opencast-user-interface-configuration is vulnerable to path traversal. The vulnerability is due to insufficient protections in the UI config module where the path is checked without validating the file separator, which allows an attacker to access files within other folders...

CVE-2025-55202

Opencast is a free, open-source platform to support the management of educational audio and video content. In version 18.0 and versions before 17.7, the protections against path traversal attacks in the UI config module are insufficient, still partially allowing for attacks in very specific cases...