Magento-APSB22-48-Security-Patches

Offizielle Magento-Patches wurden veröffentlicht:Magento Docs Diese Patches adressieren die gleichen Sicherheitsprobleme wie dieses Repository. Allerdings haben wir einige Fehlerbehebungen für ältere Magento-Versionen hinzugefügt. Sicherheits-Patches für APSB22-48 Dieses Repository enthält Magent...

Langchaingo supports jinja2 and gonja for syntax parsing, allowing for arbitrary file read

Overview LangChainGo, the Go implementation of LangChain, a large language model LLM application building framework, has been discovered to contain an arbitrary file read vulnerability. The vulnerability, tracked as CVE-2025-9556, allows for arbitrary file read through the Gonja template engine...

GHSA-C9GP-64C4-2RRH Server-Side Template Injection (SSTI) with Grav CMS security sandbox bypass

Summary Grav CMS is vulnerable to a Server-Side Template Injection SSTI, which allows any authenticated user editor permissions are sufficient to execute arbitrary code on the remote server bypassing the existing security sandbox. Details The Grav CMS implements a custom sandbox to protect the...