CVE-2025-64509

Bugsink is a self-hosted error tracking tool. In versions prior to 2.0.6, a specially crafted Brotli-compressed envelope can cause Bugsink to spend excessive CPU time in decompression, leading to denial of service. This can be done if the DSN is known, which it is in many common setups JavaScript...

PT-2024-40166 · Symfony +1 · Symfony +1

Name of the Vulnerable Software and Affected Versions: Symfony versions prior to 2.0.6 Description: The issue allows a user to switch to another user's account by changing their username via a form to an existing username, resulting in a validation error but modifying the user object in the sessi...

SUSE CVE-2016-9583

An out-of-bounds heap read vulnerability was found in the jpcpinextpcrl function of jasper before 2.0.6 when processing crafted input...