Skip to content
OpenAdvisories

Archive

November 2025

Vulnerabilities first published in this month (UTC), newest first.

2 results · Clear filters · Feed

  • Low 3.3
    CVE-2025-65681 Public exploit

    Overhang Tutor Discloses Sensitive Information due to Improper Cache-Control

    An issue was discovered in Overhang.IO (tutor-open-edx) (overhangio/tutor) 20.0.2 allowing local unauthorized attackers to gain access to sensitive information due to the absence of proper cache-control HTTP headers and client-side session checks.

  • Low 1.9
    CVE-2025-13425 Public exploit

    Denial of Service in OSV-SCALIBR

    A bug in the filesystem traversal fallback path causes fs/diriterate/diriterate.go:Next() to overindex an empty slice when ReadDir returns nil for an empty directory, resulting in a panic (index out of range) and an application crash (denial of service) in OS…