Skip to content
OpenAdvisories

Archive

23 December 2025

Vulnerabilities first published on this day (UTC), newest first.

← November 2025 2025 / December /23 January 2026 →
  1. 1143
  2. 2179
  3. 396
  4. 4170
  5. 5146
  6. 666
  7. 723
  8. 8246
  9. 9672
  10. 10261
  11. 11210
  12. 12230
  13. 1382
  14. 1444
  15. 15149
  16. 16364
  17. 17191
  18. 18399
  19. 19111
  20. 2024
  21. 2130
  22. 22111
  23. 23154
  24. 24494
  25. 2533
  26. 2659
  27. 2715
  28. 2844
  29. 29131
  30. 30428
  31. 31219
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Critical 9.3
    CVE-2025-68664 Public exploit EPSS 43%

    LangChain serialization injection vulnerability enables secret extraction in dumps/loads APIs

    LangChain is a framework for building agents and LLM-powered applications. Prior to versions 0.3.81 and 1.2.5, a serialization injection vulnerability exists in LangChain's dumps() and dumpd() functions. The functions do not escape dictionaries with 'lc' keys…

    langchain-ai langchain langchain-core PyPI
  • Critical 10.0
    CVE-2025-66209 Public exploit

    Coolify Vulnerable to Authenticated Remote Code Execution via Command Injection in Database Backup

    Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to version 4.0.0-beta.451, an authenticated command injection vulnerability in the Database Backup functionality allows users with application/service ma…

    coollabsio coolify
  • High 8.8
    CVE-2025-59886 Public exploit

    Improper input validation at one of the endpoints of Eaton xComfort ECI's web interface, could lead into an attacker wi…

    Eaton Eaton xComfort ECI
  • Critical 10.0
    CVE-2024-57521 Public exploit

    SQL Injection vulnerability in RuoYi v.4.7.9 and before allows a remote attacker to execute arbitrary code via the crea…

  • Critical 9.8
    CVE-2025-65354 Public exploit

    Improper input handling in /Grocery/search_products_itname.php inPuneethReddyHC event-management 1.0 permits SQL inject…