CVE-2025-32909

A flaw was found in libsoup. SoupContentSniffer may be vulnerable to a NULL pointer dereference in the sniffmp4 function. The HTTP server may cause the libsoup client to crash. Mitigation Currently, no mitigation is available for this vulnerability...

CVE-2025-32913

A flaw was found in libsoup, where the soupmessageheadersgetcontentdisposition function is vulnerable to a NULL pointer dereference. This flaw allows a malicious HTTP peer to crash a libsoup client or server that uses this function. Mitigation Currently, no mitigation is available for this...

CVE-2025-32911

A use-after-free type vulnerability was found in libsoup, in the soupmessageheadersgetcontentdisposition function. This flaw allows a malicious HTTP client to cause memory corruption in the libsoup server. Mitigation Currently, no mitigation is available for this vulnerability...

CVE-2025-32908

A flaw was found in libsoup. The HTTP/2 server in libsoup may not fully validate the values of pseudo-headers :scheme, :authority, and :path, which may allow a user to cause a denial of service DoS. Mitigation Currently, no mitigation was found for this vulnerability...

CVE-2025-32907

A flaw was found in libsoup. The implementation of HTTP range requests is vulnerable to a resource consumption attack. This flaw allows a malicious client to request the same range many times in a single HTTP request, causing the server to use large amounts of memory. This does not allow for a fu...

CVE-2025-32906

A flaw was found in libsoup, where the soupheadersparserequest function may be vulnerable to an out-of-bound read. This flaw allows a malicious user to use a specially crafted HTTP request to crash the HTTP server. Mitigation Currently, no mitigation was found for this vulnerability...

CVE-2025-3360

A flaw was found in GLib. An integer overflow and buffer under-read occur when parsing a long invalid ISO 8601 timestamp with the gdatetimenewfromiso8601 function. Mitigation Currently, no mitigation is available for this vulnerability...

CVE-2025-3359

A flaw was found in GNUPlot. A segmentation fault via IOstrinitstaticinternal may jeopardize the environment. Mitigation Currently, no mitigation is available for this vulnerability...

CVE-2025-32053

A flaw was found in libsoup. A vulnerability in snifffeedorhtml and skipinsignificantspace functions may lead to a heap buffer over-read. Mitigation No mitigation is currently available for this vulnerability...

CVE-2025-32052

A flaw was found in libsoup. A vulnerability in the sniffunknown function may lead to heap buffer over-read. Mitigation No mitigation is currently available for this vulnerability...

CVE-2025-32049

A flaw was found in libsoup. The SoupWebsocketConnection may accept a large WebSocket message, which may cause libsoup to allocate memory and lead to a denial of service DoS. Mitigation No mitigation is currently available for this vulnerability...

CVE-2025-3155

A flaw was found in Yelp. The Gnome user help application allows the help document to execute arbitrary scripts. This vulnerability allows malicious users to input help documents, which may exfiltrate user files to an external environment. Mitigation Currently, no mitigation is available for this...

CVE-2025-2784

A flaw was found in libsoup. The package is vulnerable to a heap buffer over-read when sniffing content via the skipinsightwhitespace function. Libsoup clients may read one byte out-of-bounds in response to a crafted HTTP response by an HTTP server. Mitigation Currently no mitigation is available...

CVE-2025-2842

A flaw was found in the Tempo Operator. When the Jaeger UI Monitor Tab functionality is enabled in a Tempo instance managed by the Tempo Operator, the Operator creates a ClusterRoleBinding for the Service Account of the Tempo instance to grant the cluster-monitoring-view ClusterRole. This can be...

CVE-2025-2786

A flaw was found in Tempo Operator, where it creates a ServiceAccount, ClusterRole, and ClusterRoleBinding when a user deploys a TempoStack or TempoMonolithic instance. This flaw allows a user with full access to their namespace to extract the ServiceAccount token and use it to submit TokenReview...

CVE-2025-31181

A flaw was found in gnuplot. The X11graphics function may lead to a segmentation fault and cause a system crash. Mitigation Currently, no mitigation is available for this vulnerability...

CVE-2025-31178

A flaw was found in gnuplot. The GetAnnotateString function may lead to a segmentation fault and cause a system crash. Mitigation Currently, no mitigation is available for this vulnerability...

CVE-2025-31177

gnuplot is affected by a heap buffer overflow at function utf8copyone. Mitigation Currently, no mitigation is available for this vulnerability...

CVE-2025-31176

A flaw was found in gnuplot. The plot3dpoints function may lead to a segmentation fault and cause a system crash. Mitigation Currently, no mitigation is available for this vulnerability...

CVE-2024-12910

A flaw was found in the run-llama/llamaindex repository. This vulnerability allows an attacker to cause a denial of service DoS by controlling a URL variable to contain the root URL, leading to infinite recursive calls to the getarticleurls method and exhausting system resources. Mitigation...