Skip to content
OpenAdvisories

Archive

30 May 2025

Vulnerabilities first published on this day (UTC), newest first.

← April 2025 2025 / May /30 June 2025 →
  1. 1372
  2. 2176
  3. 331
  4. 48
  5. 5127
  6. 6172
  7. 7308
  8. 8113
  9. 9152
  10. 1033
  11. 1128
  12. 12125
  13. 13312
  14. 14107
  15. 15309
  16. 16172
  17. 1751
  18. 1851
  19. 19244
  20. 20172
  21. 21114
  22. 22136
  23. 23183
  24. 2426
  25. 2520
  26. 2669
  27. 2795
  28. 2869
  29. 2978
  30. 30112
  31. 3137
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Low 3.7
    CVE-2025-48946

    liboqs affected by theoretical design flaw in HQC

    liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptography algorithms. liboqs prior to version 0.13.0 supports the HQC algorithm, an algorithm with a theoretical design flaw which leads to large numbers of malforme…

    open-quantum-safe liboqs
  • Low 2.6
    CVE-2025-48938

    Prevent GitHub CLI and extensions from executing arbitrary commands from compromised GitHub Enterprise Server

    go-gh is a collection of Go modules to make authoring GitHub CLI extensions easier. A security vulnerability has been identified in versions prior to 2.12.1 where an attacker-controlled GitHub Enterprise Server could result in executing arbitrary commands on …

    cli go-gh wolfictl gh Debian Ubuntu Azure Linux Wolfi Go
  • Low 3.1
    CVE-2025-3611

    Improper Access Control in Mattermost allows System Managers to view team details despite role restrictions

    Mattermost versions 10.7.x <= 10.7.0, 10.5.x <= 10.5.3, 9.11.x <= 9.11.12 fails to properly enforce access control restrictions for System Manager roles, allowing authenticated users with System Manager privileges to view team details they should not have acc…

    Mattermost Mattermost github.com/mattermost/mattermost-server github.com/mattermost/mattermost-server/v6 Go
  • Low 3.1
    CVE-2025-1792

    Improper Access Control in Mattermost Channel Member API

    Mattermost versions 10.7.x <= 10.7.0, 10.5.x <= 10.5.3, 9.11.x <= 9.11.12 fail to properly enforce access controls for guest users accessing channel member information, allowing authenticated guest users to view metadata about members of public channels via t…

    Mattermost Mattermost github.com/mattermost/mattermost-server github.com/mattermost/mattermost-server/v6 Go
  • Low 2.7
    CVE-2025-48491

    Project AI API Key Exposure in Source Code

    Project AI is a platform designed to create AI agents. Prior to the pre-beta version, a hardcoded API key was present in the source code. This issue has been patched in the pre-beta version.

    aryan6673 project-ai
  • Low 2.3
    CVE-2025-48068

    Information exposure in Next.js dev server due to lack of origin verification

    Next.js is a React framework for building full-stack web applications. In versions starting from 13.0 to before 14.2.30 and 15.0.0 to before 15.2.2, Next.js may have allowed limited source code exposure when the dev server was running with the App Router enab…

    vercel next.js next npm
  • Low 2.9
    CVE-2025-47952

    Traefik allows path traversal using url encoding

    Traefik (pronounced traffic) is an HTTP reverse proxy and load balancer. Prior to versions 2.11.25 and 3.4.1, there is a potential vulnerability in Traefik managing the requests using a PathPrefix, Path or PathRegex matcher. When Traefik is configured to rout…

    traefik traefik github.com/traefik/traefik github.com/traefik/traefik/v2 Wolfi Go