PT-2025-39319

Name of the Vulnerable Software and Affected Versions Langfuse versions prior to d67b317 Langfuse version 3.1 Description Improper authorization in the background migration endpoints of Langfuse allows any authenticated user to invoke migration control functions. This can lead to data corruption ...

CVE-2025-59305

Improper authorization in the background migration endpoints of Langfuse 3.1 before d67b317 allows any authenticated user to invoke migration control functions. This can lead to data corruption or denial of service through unauthorized access to TRPC endpoints such as backgroundMigrations.all,...

CVE-2025-59305

CVE-2025-59305 concerns Langfuse 3.1 prior to the commit d67b317, where improper authorization on background migration endpoints allows any authenticated user to invoke migration control functions. Exploitable via TRPC endpoints such as backgroundMigrations.all, backgroundMigrations.status, and b...

Important: Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Container Release Update

An update is now available for Red Hat Ansible Automation Platform 2.5 Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT Managers can provide top-down guidelines on how automation is applied to individual teams,...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the recursive use of stack buffers in XE migrations that could lead to a stack overflow...

Malicious code in monolith-twirp-git_src_migrator-migrations (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 549f13f989fce7c29dae7c0e9f28fe0add0808204154896a48c7d5b093e0d6aa The OpenSSF Package Analysis project identified 'monolith-twirp-gitsrcmigrator-migrations' @ 1.11.0 rubygems as malicious. It is considered...

MAL-2025-46951 Malicious code in monolith-twirp-git_src_migrator-migrations (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 549f13f989fce7c29dae7c0e9f28fe0add0808204154896a48c7d5b093e0d6aa The OpenSSF Package Analysis project identified 'monolith-twirp-gitsrcmigrator-migrations' @ 1.11.0 rubygems as malicious. It is considered...

Malicious code in monolith-twirp-octoshift-migrations (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8c8938887f6cff7780099f00ec00251da4904659f59fb9c197583288fc8951c4 The OpenSSF Package Analysis project identified 'monolith-twirp-octoshift-migrations' @ 1.8.0 rubygems as malicious. It is considered malicious...

MAL-2025-46914 Malicious code in monolith-twirp-octoshift-migrations (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8c8938887f6cff7780099f00ec00251da4904659f59fb9c197583288fc8951c4 The OpenSSF Package Analysis project identified 'monolith-twirp-octoshift-migrations' @ 1.8.0 rubygems as malicious. It is considered malicious...

Linux Distros Unpatched Vulnerability : CVE-2020-8185

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A denial of service vulnerability exists in Rails 6.0.3.2 that allowed an untrusted user to run any pending migrations on a Rails app running in production...

Exploit for Out-of-bounds Write in Php

Task Management APP CVE-2019-11043 Lab Minimal PHP app with...

CVE-2025-55282

aiven-db-migrate is an Aiven database migration tool. Prior to 1.0.7, there is a privilege escalation vulnerability that allows a user to elevate to superuser inside PostgreSQL databases during a migration from an untrusted source server. By exploiting a lack of searchpath restriction, an attacke...

CVE-2025-55282 aiven-db-migrate allows Privilege Escalation via unrestricted search_path during migration

aiven-db-migrate is an Aiven database migration tool. Prior to 1.0.7, there is a privilege escalation vulnerability that allows a user to elevate to superuser inside PostgreSQL databases during a migration from an untrusted source server. By exploiting a lack of searchpath restriction, an attacke...

MAL-2025-36833 Malicious code in thoughtful_migrations (npm)

The package thoughtfulmigrations was found to contain malicious code...

Malicious code in thoughtful_migrations (npm)

The package thoughtfulmigrations was found to contain malicious code...

One Year of Warm Migrations

...

SUSE CVE-2025-38314

In the Linux kernel, the following vulnerability has been resolved: virtio-pci: Fix result size returned for the admin command completion The result size returned by virtiopciadmindevpartsget is 8 bytes larger than the actual result data size. This occurs because the resultsgsize field of the...

UBUNTU-CVE-2025-38314

In the Linux kernel, the following vulnerability has been resolved: virtio-pci: Fix result size returned for the admin command completion The result size returned by virtiopciadmindevpartsget is 8 bytes larger than the actual result data size. This occurs because the resultsgsize field of the...

CVE-2025-38314

CVE-2025-38314 is a Linux kernel vulnerability affecting virtio-pci. The issue arises in virtio_pci_admin_dev_parts_get(), where the result_sg_size is filled with the length from virtqueue_get_buf(), inadvertently including an 8-byte status, causing oversized transfer data and potential kernel bu...

Private Data Structure Returned From A Public Method

Overview Affected versions of this package are vulnerable to Private Data Structure Returned From A Public Method. When a user accesses an externally referenced image, the provider of the image may obtain private information about the IP address of that accessing user. Remediation Upgrade...