Skip to content
OpenAdvisories

Archive

19 June 2025

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Critical 9.5
    CVE-2025-52464 Public exploit

    Meshtastic Repeated Public and Private Keypairs

    Meshtastic is an open source mesh networking solution. In versions from 2.5.0 to before 2.6.11, the flashing procedure of several hardware vendors was resulting in duplicated public/private keys. Additionally, the Meshtastic was failing to properly initialize…

  • Critical 9.1
    CVE-2025-52467 Public exploit

    pgai secrets exfiltration via `pull_request_target`

    pgai is a Python library that transforms PostgreSQL into a retrieval engine for RAG and Agentic applications. Prior to commit 8eb3567, the pgai repository was vulnerable to an attack allowing the exfiltration of all secrets used in one workflow. In particular…