CVE-2025-8698

Open5GS up to version 2.7.5 contains a vulnerability in the AMF Service, specifically the amf_nsmf_pdusession_handle_release_sm_context function in src/amf/nsmf-handler.c. The issue causes a reachable assertion when triggered, requiring local access to exploit. Public exploit information is avail...

GHSA-4MXG-3P6V-XGQ3 Node-SAML SAML Signature Verification Vulnerability

Node-SAML loads the assertion from the unsigned original response document. This is different than the parts that are verified when checking signature. This allows an attacker to modify authentication details within a valid SAML assertion. For example, in one attack it is possible to remove any...

CVE-2025-6536 Tarantool datetime.c tm_to_datetime assertion

A vulnerability has been found in Tarantool up to 3.3.1 and classified as problematic. Affected by this vulnerability is the function tmtodatetime in the library src/lib/core/datetime.c. The manipulation leads to reachable assertion. Attacking locally is a requirement. The exploit has been...