EUVD-2025-176139

Malicious code in sun-thread-monitor-void-sun npm...

EUVD-2025-175954

Malicious code in thread-monitor-async-omicron-optimize npm...

CVE-2024-4447

In the System → Maintenance tool, the Logged Users tab surfaces sessionId data for all users via the Direct Web Remoting API UserSessionAjax.getSessionList.dwr calls. While this is information that would and should be available to admins who possess "Sign In As" powers, admins who otherwise lack...