Moderate: Red Hat Security Advisory: expat security update

An update for expat is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

Moderate: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Telecommunications Update Service, and Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as...

flannel-0.26.6-1.1 on GA media (moderate)

flannel-0.26.6-1.1 on GA media Announcement ID: openSUSE-SU-2025:14989-1 Rating: moderate Cross-References: CVE-2025-30204 CVSS scores: CVE-2025-30204 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2025-30204 SUSE : 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N...

rekor-1.3.10-1.1 on GA media (moderate)

rekor-1.3.10-1.1 on GA media Announcement ID: openSUSE-SU-2025:14990-1 Rating: moderate Cross-References: CVE-2023-45288 CVE-2024-6104 CVE-2025-22868 CVE-2025-22869 CVE-2025-27144 CVE-2025-30204 CVSS scores: CVE-2023-45288 SUSE : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2023-45288 SUS...

CVE-2025-32427

Formie is a Craft CMS plugin for creating forms. Prior to 2.1.44, when importing a form from JSON, if the field label or handle contained malicious content, the output wasn't correctly escaped when viewing a preview of what was to be imported. As imports are undertaking primarily by users who hav...

python311-PyJWT-2.10.1-2.1 on GA media (moderate)

python311-PyJWT-2.10.1-2.1 on GA media Announcement ID: openSUSE-SU-2025:14987-1 Rating: moderate Cross-References: CVE-2022-29217 CVSS scores: CVE-2022-29217 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can...

python311-Django-5.1.8-1.1 on GA media (moderate)

python311-Django-5.1.8-1.1 on GA media Announcement ID: openSUSE-SU-2025:14986-1 Rating: moderate Cross-References: CVE-2025-27556 CVSS scores: CVE-2025-27556 SUSE : 5.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can...

CVE-2025-32427 Formie has a XSS vulnerability for importing forms

Formie is a Craft CMS plugin for creating forms. Prior to 2.1.44, when importing a form from JSON, if the field label or handle contained malicious content, the output wasn't correctly escaped when viewing a preview of what was to be imported. As imports are undertaking primarily by users who hav...

CVE-2025-32427

CVE-2025-32427 concerns the verbb/formie Craft CMS plugin. Before version 2.1.44, importing a form from JSON could leak XSS if a field label or handle contained malicious content, because the preview output was not properly escaped. The vulnerability requires intentional tampering with the JSON e...

WordPress Restrict User Registration plugin <= 1.0.1 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by Abdi Pranata in WordPress Plugin Restrict User Registration versions = 1.0.1...

govulncheck-vulndb-0.0.20250408T210408-1.1 on GA media (moderate)

govulncheck-vulndb-0.0.20250408T210408-1.1 on GA media Announcement ID: openSUSE-SU-2025:14978-1 Rating: moderate Cross-References: CVE-2025-22871 CVSS scores: CVE-2025-22871 SUSE : 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N CVE-2025-22871 SUSE : 9.1...

apache2-mod_auth_openidc-2.4.16.11-1.1 on GA media (moderate)

apache2-modauthopenidc-2.4.16.11-1.1 on GA media Announcement ID: openSUSE-SU-2025:14972-1 Rating: moderate Cross-References: CVE-2025-31492 CVSS scores: CVE-2025-31492 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2025-31492 SUSE : 8.2...

etcd-3.5.21-1.1 on GA media (moderate)

etcd-3.5.21-1.1 on GA media Announcement ID: openSUSE-SU-2025:14973-1 Rating: moderate Cross-References: CVE-2025-30204 CVSS scores: CVE-2025-30204 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2025-30204 SUSE : 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N...

MozillaFirefox-137.0-1.1 on GA media (moderate)

MozillaFirefox-137.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:14971-1 Rating: moderate Cross-References: CVE-2025-3028 CVE-2025-3029 CVE-2025-3030 CVE-2025-3031 CVE-2025-3032 CVE-2025-3033 CVE-2025-3034 CVE-2025-3035 CVSS scores: CVE-2025-3028 SUSE : 6.5...

libmozjs-128-0-128.9.0-1.1 on GA media (moderate)

libmozjs-128-0-128.9.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:14975-1 Rating: moderate Cross-References: CVE-2025-3028 CVSS scores: CVE-2025-3028 SUSE : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can n...

govulncheck-vulndb-0.0.20250402T160203-1.1 on GA media (moderate)

govulncheck-vulndb-0.0.20250402T160203-1.1 on GA media Announcement ID: openSUSE-SU-2025:14970-1 Rating: moderate Cross-References: CVE-2025-0312 CVE-2025-23391 CVE-2025-29072 CVE-2025-29868 CVE-2025-30223 CVE-2025-31135 CVSS scores: CVE-2025-23391 SUSE : 9.1...

go1.24-1.24.2-1.1 on GA media (moderate)

go1.24-1.24.2-1.1 on GA media Announcement ID: openSUSE-SU-2025:14963-1 Rating: moderate Cross-References: CVE-2025-22871 CVSS scores: CVE-2025-22871 SUSE : 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N CVE-2025-22871 SUSE : 9.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N...

firefox-esr-128.9.0-1.1 on GA media (moderate)

firefox-esr-128.9.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:14961-1 Rating: moderate Cross-References: CVE-2025-2783 CVE-2025-2857 CVE-2025-3028 CVE-2025-3029 CVE-2025-3030 CVSS scores: CVE-2025-3028 SUSE : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L CVE-2025-3029 SUSE : 7.3...

gsl-2.8-4.1 on GA media (moderate)

gsl-2.8-4.1 on GA media Announcement ID: openSUSE-SU-2025:14964-1 Rating: moderate Cross-References: CVE-2020-353570 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the gsl-2.8-4.1 package on...

gotosocial-0.18.3-2.1 on GA media (moderate)

gotosocial-0.18.3-2.1 on GA media Announcement ID: openSUSE-SU-2025:14954-1 Rating: moderate Cross-References: CVE-2025-30204 CVSS scores: CVE-2025-30204 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2025-30204 SUSE : 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA...