Skip to content
OpenAdvisories

Archive

3 June 2025

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Critical 9.4
    CVE-2025-4517 Public exploit

    Arbitrary writes via tarfile realpath overflow

    Allows arbitrary filesystem writes outside the extraction directory during extraction with filter="data". You are affected by this vulnerability if using the tarfile module to extract untrusted tar archives using TarFile.extractall() or TarFile.extract() usin…

  • Critical 9.8
    CVE-2025-44148 Public exploit Scanner template EPSS 55%

    Cross Site Scripting (XSS) vulnerability in MailEnable before v10 allows a remote attacker to execute arbitrary code vi…