GHSA-G23H-7VF9-XC25 vulnerabilities

Vulnerabilities for packages: difftastic...

GHSA-F7VH-QWP3-X37M vulnerabilities

Vulnerabilities for packages: druid...

GHSA-QF7C-7R9H-MM92 vulnerabilities

Vulnerabilities for packages: elasticsearch-fips, ruby4.0-elasticsearch, sonarqube...

GHSA-RWVC-J5JR-MGVH vulnerabilities

Vulnerabilities for packages: kibana...

GHSA-8Q63-W3PX-VG38 vulnerabilities

Vulnerabilities for packages: ffmpeg...

GHSA-6HWG-W5JG-9C6X vulnerabilities

Vulnerabilities for packages: rancher-machine, docker-machine-driver-harvester...

CVE-2025-14147: Improper Neutralization of Input During Web Page Generation

The Easy GitHub Gist Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' parameter of the gist shortcode in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,...

PT-2026-1633

Name of the Vulnerable Software and Affected Versions Easy GitHub Gist Shortcodes plugin for WordPress versions prior to 1.0 Description The Easy GitHub Gist Shortcodes plugin for WordPress is susceptible to Stored Cross-Site Scripting through the id parameter of the gist shortcode. Insufficient...

WordPress Easy GitHub Gist Shortcodes plugin <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'id' Shortcode Attribute vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via 'id' Shortcode Attribute vulnerability discovered by zakaria in WordPress Plugin Easy GitHub Gist Shortcodes versions = 1.0...

CVE-2025-13744

An Improper Neutralization of Input During Web Page Generation vulnerability was identified in GitHub Enterprise Server that allowed attacker controlled HTML to be rendered by the Filter component search across GitHub that could be used to exfiltrate sensitive information. An attacker would requi...

CVE-2025-13744

An Improper Neutralization of Input During Web Page Generation vulnerability was identified in GitHub Enterprise Server that allowed attacker controlled HTML to be rendered by the Filter component search across GitHub that could be used to exfiltrate sensitive information. An attacker would requi...

CVE-2025-13744 Improper Neutralization of Input During Web Page Generation vulnerability was identified in GitHub Enterprise Server that allowed rendering of malicious HTML

An Improper Neutralization of Input During Web Page Generation vulnerability was identified in GitHub Enterprise Server that allowed attacker controlled HTML to be rendered by the Filter component search across GitHub that could be used to exfiltrate sensitive information. An attacker would requi...

CVE-2025-13744

CVE-2025-13744 affects GitHub Enterprise Server. The issue is an Improper Neutralization of Input During Web Page Generation in the Filter (search) component, allowing attacker-controlled HTML to be rendered across GitHub and potentially exfiltrate sensitive information. An attacker must have per...

CVE-2025-13744 Improper Neutralization of Input During Web Page Generation vulnerability was identified in GitHub Enterprise Server that allowed rendering of malicious HTML

An Improper Neutralization of Input During Web Page Generation vulnerability was identified in GitHub Enterprise Server that allowed attacker controlled HTML to be rendered by the Filter component search across GitHub that could be used to exfiltrate sensitive information. An attacker would requi...

GHSA-4PV4-4X2X-6J88

creationtimestamp| type| source ---|---|--- 2026-01-06 20:13:41+00:00| seen| Telegram/W9cnrPaYEkduQXNMxTamq0Dafu5VRSzGfTVZkSYwQLJrcs...

awesome-panel-extensions (>=20210326.1.0, <=20210502.1.0), castordashboard (>=2.2.0, <=2.2.2) +6 more potentially affected by CVE-2026-21883 via bokeh (2.3.0)

bokeh PYPI version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on bokeh and may be impacted: - awesome-panel-extensions =20210326.1.0, =2.2.0, =0.3.0, =0.1.2, =0.0.152, =20210403.1.0, =0.0.25, =0.3.2, =0.4.0 Source cves: CVE-2026-21883 Source...

CVE-2024-29792

creationtimestamp| type| source ---|---|--- 2026-01-06 17:35:45+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-29792.yaml 2026-01-10 21:02:56+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3mc3vvnmbj62b...

GHSA-VM5P-43QH-7PMQ

creationtimestamp| type| source ---|---|--- 2026-01-06 17:06:07+00:00| seen| Telegram/NtgdGeZWqROuFZ2INFVIF7wbiZX6L2oMH79jCDcZlZLsnY...

CVE-2025-13652

creationtimestamp| type| source ---|---|--- 2026-01-06 05:03:00+00:00| seen| Telegram/1VAc4wLFDTfmKRJLf2vk5fzkuztcTsljmRPO6kR4McoZxkg 2026-04-10 04:18:53+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-13652.yaml 2026-04-13 21:03:08+00:00|...

GHSA-6JHG-HG63-JVVF

creationtimestamp| type| source ---|---|--- 2026-01-06 01:04:01+00:00| seen| Telegram/2QW8Fh9GNw2oVUTZekwxOkJVN6yFYGFerNd9WhPSIM87KY 2026-01-24 21:31:00+00:00| seen| https://gist.github.com/alon710/8b3299aac7c619edde4755a5c764a295 2026-01-24 21:31:01+00:00| seen|...