PT-2025-32990 · Unknown · Cherry-Studio

Name of the Vulnerable Software and Affected Versions: Cherry Studio version 1.5.1 Description: Cherry Studio is a desktop client that supports multiple LLM providers. A remote code execution RCE vulnerability exists when connecting to streamableHttp MCP servers. The issue stems from the server’s...

PT-2021-23746 · Unknown · Fort Validator

Name of the Vulnerable Software and Affected Versions: FORT Validator versions prior to 1.5.2 Description: The issue occurs when an RPKI CA publishes an X.509 EE certificate, causing FORT Validator to crash. This crash leads to RTR clients, such as BGP routers, losing access to the RPKI VRP data...

GHSA-5J3G-JFQ3-7JWX Arbitrary JavaScript Execution in bassmaster

A vulnerability exists in bassmaster = 1.5.1 that allows for an attacker to provide arbitrary JavaScript that is then executed server side via eval. Recommendation Update to bassmaster version 1.5.2 or greater...