Skip to content
OpenAdvisories

Archive

1 October 2025

Vulnerabilities first published on this day (UTC), newest first.

← September 2025 2025 / October /1 November 2025 →
  1. 1246
  2. 2120
  3. 3158
  4. 4159
  5. 539
  6. 6114
  7. 7241
  8. 8103
  9. 9170
  10. 10126
  11. 1176
  12. 1236
  13. 1391
  14. 14370
  15. 15189
  16. 16132
  17. 1787
  18. 1873
  19. 1911
  20. 2081
  21. 21156
  22. 22393
  23. 2398
  24. 2499
  25. 2539
  26. 266
  27. 27315
  28. 28147
  29. 29161
  30. 30203
  31. 31103
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Low 2.1
    CVE-2025-61587

    Weblate integration with Anubis can lead to Open Redirect via redir parameter

    Weblate is a web based localization tool. An open redirect exists in versions 5.13.2 and below via the redir parameter on .within.website when Weblate is configured with Anubis and REDIRECT_DOMAINS is not set. An attacker can craft a URL on the legitimate dom…

    WeblateOrg weblate weblate PyPI
  • Low 3.3
    GHSA-7jp2-5h22-m432

    Auth0 Symfony SDK Does Not Properly Handle File Types in Bulk User Import

    ### Overview In applications built with the Auth0-PHP SDK, the Bulk User Import endpoint does not validate the file path wrapper or value. Without proper validation, affected applications may accept arbitrary file paths or URLs. ### Am I affected? You are aff…

    auth0/symfony Packagist
  • Low 3.3
    GHSA-hjfh-5jmm-xr24

    laravel-auth0 SDK Does Not Properly Handle File Types in Bulk User Import

    ### Overview In applications built with the Auth0-PHP SDK, the Bulk User Import endpoint does not validate the file path wrapper or value. Without proper validation, affected applications may accept arbitrary file paths or URLs. ### Am I affected? You are aff…

    auth0/login Packagist
  • Low 3.3
    CVE-2025-58769

    auth0-PHP: Improper File Type Handling in Bulk User Import

    auth0-PHP is an SDK for Auth0 Authentication and Management APIs. In versions 3.3.0 through 8.16.0, the Bulk User Import endpoint in applications built with the SDK does not validate the file-path wrapper or value. Without proper validation, affected applicat…

    auth0 laravel-auth0 auth0/auth0-php Packagist
  • Low 3.5
    CVE-2025-58054

    Discourse is vulnerable to XSS when quoting chat messages

    Discourse is an open-source community discussion platform. Versions 3.5.0 and below are vulnerable to XSS attacks through parsing and rendering of chat channel titles and chat thread titles via the quote message functionality when using the rich text editor. …

    Discourse Discourse
  • Low 1.9
    CVE-2023-50301

    IBM Transformation Extender Advanced information disclosure

    IBM Transformation Extender Advanced 10.0.1 stores potentially sensitive information in log files that could be read by a local user.

    IBM Transformation Extender Advanced
  • Low 3.1
    CVE-2025-59682

    Django vulnerable to partial directory traversal via archives

    An issue was discovered in Django 4.2 before 4.2.25, 5.1 before 5.1.13, and 5.2 before 5.2.7. The django.utils.archive.extract() function, used by the "startapp --template" and "startproject --template" commands, allows partial directory traversal via an arch…

    djangoproject Django python-django django Debian Ubuntu Alpine PyPI
  • Low 2.9
    CVE-2025-43718

    Poppler 24.06.1 through 25.x before 25.04.0 allows stack consumption and a SIGSEGV via deeply nested structures within …

    Freedesktop Poppler poppler poppler Debian Ubuntu