Skip to content
OpenAdvisories

Archive

26 July 2025

Vulnerabilities first published on this day (UTC), newest first.

← June 2025 2025 / July /26 August 2025 →
  1. 189
  2. 284
  3. 3149
  4. 4187
  5. 58
  6. 628
  7. 7175
  8. 8440
  9. 9110
  10. 10214
  11. 1196
  12. 1249
  13. 1349
  14. 14127
  15. 15156
  16. 16190
  17. 1789
  18. 18110
  19. 1946
  20. 2066
  21. 21237
  22. 22119
  23. 2394
  24. 2478
  25. 25219
  26. 2645
  27. 2741
  28. 28124
  29. 29175
  30. 3088
  31. 31114
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Low 3.5
    CVE-2025-8191 Public exploit

    macrozheng mall Swagger UI index.html cross site scripting

    A vulnerability, which was classified as problematic, was found in macrozheng mall up to 1.0.3. Affected is an unknown function of the file /swagger-ui/index.html of the component Swagger UI. The manipulation of the argument configUrl leads to cross site scri…

    macrozheng mall
  • Critical 9.1
    CVE-2025-54416 Public exploit

    tj-actions/branch-names Contains Command Injection Vulnerability

    tj-actions/branch-names is a Github actions repository that contains workflows to retrieve branch or tag names with support for all events. In versions 8.2.1 and below, a critical vulnerability has been identified in the tj-actions/branch-names' GitHub Action…

    tj-actions branch-names tj-actions/branch-names GitHub Actions
  • Critical 9.1
    CVE-2025-54415 Public exploit

    dag-factory's CI/CD Workflow Allows for Repository Takeover and Secret Exfiltration

    dag-factory is a library for Apache Airflow® to construct DAGs declaratively via configuration files. In versions 0.23.0a8 and below, a high-severity vulnerability has been identified in the cicd.yml workflow within the astronomer/dag-factory GitHub repositor…

    astronomer dag-factory