Skip to content
OpenAdvisories

Archive

28 October 2025

Vulnerabilities first published on this day (UTC), newest first.

← September 2025 2025 / October /28 November 2025 →
  1. 1246
  2. 2120
  3. 3158
  4. 4159
  5. 539
  6. 6114
  7. 7241
  8. 8103
  9. 9170
  10. 10126
  11. 1176
  12. 1236
  13. 1391
  14. 14370
  15. 15189
  16. 16132
  17. 1787
  18. 1873
  19. 1911
  20. 2081
  21. 21156
  22. 22393
  23. 2398
  24. 2499
  25. 2539
  26. 266
  27. 27315
  28. 28147
  29. 29161
  30. 30203
  31. 31103
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 3.8
    CVE-2025-62794

    GitHub Workflow Updater stored the optional Github token in plaintext

    GitHub Workflow Updater is a VS Code extension that automatically pins GitHub Actions to specific commits for enhanced security. Before 0.0.7, any provided Github token would be stored in plaintext in the editor configuration as json on disk, rather than thro…

    RichardoC github-workflow-updater-extension
  • Low 3.7
    CVE-2025-10939

    Org.keycloak/keycloak-quarkus-server: unable to restrict access to the admin console

    A flaw was found in Keycloak. The Keycloak guides recommend to not expose /admin path to the outside in case the installation is using a proxy. The issue occurs at least via ha-proxy, as it can be tricked to using relative/non-normalized paths to access the /…

    Red Hat Keycloak Red Hat build of Keycloak 26.4 Keycloak Maven