Skip to content
OpenAdvisories

Archive

6 November 2025

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Low 3.1

    Use after free in V8 in Google Chrome prior to 141.0.7390.54 allowed a remote attacker to potentially perform out of bo…

  • Low 2.6

    Weblate leaks the IP of project members inviting users to assume reviewer roles in Audit log

    Weblate is a web based localization tool. In versions 5.14 and below, Weblate leaks the IP address of the project member inviting the user to the project in the audit log. The audit log includes IP addresses from admin-triggered actions, which can be viewed b…

  • Low 3.1

    OpenTofu affected denials of service in "tofu init" with maliciously-crafted module package responses

    ### Impact Unauthenticated denial of service. ### Summary When installing module packages from attacker-controlled sources, `tofu init` may use unbounded memory, cause high CPU usage, or crash when encountering maliciously-crafted TLS certificate chains or ta…