Skip to content
OpenAdvisories

Archive

15 October 2025

Vulnerabilities first published on this day (UTC), newest first.

5 results · Clear filters · Feed

  • Low 2.9

    Mailgen has HTML Injection and XSS Filter Bypass in Plaintext Emails

    mailgen is a Node.js package that generates responsive HTML e-mails for sending transactional mail. Mailgen versions through 2.0.31 contain an HTML injection vulnerability in plaintext emails generated with the generatePlaintext method when user generated con…

  • Low 3.1

    Open Redirect in reflex-dev/reflex

    Reflex is a library to build full-stack web apps in pure Python. In versions 0.5.4 through 0.8.14, the /auth-codespace endpoint automatically assigns the redirect_to query parameter value directly to client-side links without any validation and triggers autom…

  • Low 2.9

    IBM Terracotta denial of service

    Applications using affected versions of Ehcache 3.x can experience degraded cache-write performance if the application using Ehcache utilizes keys sourced from (malicious) external parties in an unfiltered/unsalted way.

  • Low 3.1

    An improper certificate validation vulnerability was reported in the Lenovo Universal Device Client (UDC) that could al…

  • Low 2.2

    Creativeitem Academy LMS up to and including 5.13 does not regenerate session IDs upon successful authentication, enabl…