Lodash version 4.17.21 is affected by CVE-2025-13465 Prototype Pollution Vulnerability in Lodash _.unset and _.omit functions

Lodash versions 4.0.0 through 4.17.22 are vulnerable to prototype pollution in the .unset and .omit functions. An attacker can pass crafted paths which cause Lodash to delete methods from global prototypes. The issue permits deletion of properties but does not allow overwriting their original...

Stack buffer overflow in CMS AuthEnvelopedData parsing in DR

Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters can trigger a stack buffer overflow. Impact summary: A stack buffer overflow may lead to a crash, causing Denial of Service, or potentially remote code execution. When parsing CMS...

Proxy-Authorization request header isn't stripped during cross-origin redirects in urllib3

urllib3 is a user-friendly HTTP client library for Python. When using urllib3's proxy support with 'ProxyManager', the 'Proxy-Authorization' header is only sent to the configured proxy, as expected. However, when sending HTTP requests without using urllib3's proxy support, it's possible to...

OpenSSL 3.0.0 < 3.0.18 Multiple Vulnerabilities detected in Nginx

Brocade SANnav provides Security updates for CVEs disclosed in OpenSSL Security Advisory 30th September 2025. - Issue summary: An application using the OpenSSL HTTP client API functions may trigger an out-of-bounds read if the 'noproxy' environment variable is set and the host portion of the...

Path traversal via unsanitized multipart filename in Zone Alias Import

A path traversal vulnerability affects the The Zone Alias Import flow feature in Brocade SANnav before 3.0.0a. A local authenticated attacker can write an uploaded content outside the intended directory...

Switch discovery credentials can be seen in plain text inside sannavswapfie

A vulnerability in Brocade SANnav before 3.0.1 can have the Brocade Fabric OS switch admin password captured in plaintext within a memory swap file on the server hosting the Brocade SANnav Virtual Machine VM. This can happen when the SANnav server encounters an Out Of Memory OOM condition. The...

security update for multiple “runc” vulnerabilities in Brocade SANnav

Brocade SANnav OVA xxxx has provided security updates for Multiple vulnerabilities affecting “runc” command-line tool CLI. CVE-2025-31133 : runc Vulnerable to Container Escape via 'maskedPaths' Abuse in 'libcontainer/rootfslinux.go' Component CVE-2025-52565 : runc Vulnerable to Container Escape v...

Azul Zulu Java Multiple Vulnerabilities (Oct 2025)

The version of Azul Zulu installed on Brocade SANnav has been updated to receive security updates to multiple vulnerabilities as referenced in the 2025-10-21 advisory. - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE...