Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-54858 State: PUBLISHED Published: 2025-10-15T13:55:51.946Z Last Updated: 2025-10-16T03:56:55.858Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: F5 Products: BIG-IP Problem Types: CWE-674 Description: When a BIG-IP Advanced WAF or BIG-IP ASM Security Policy is configured with a JSON content profile that has a malformed JSON schema, and the security policy is applied to a virtual server, undisclosed requests can cause the bd process to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://my.f5.com/manage/s/article/K00015
ot evaluated. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://my.f5.com/manage/s/article/K000156621
CVE ID: CVE-2025-54859 State: PUBLISHED Published: 2025-10-16T10:03:24.272Z Last Updated: 2025-10-16T13:55:28.557Z Severity: MEDIUM (CVSS 4.8 CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N) Vendors: NEOJAPAN Inc. Products: desknet's NEO Problem Types: CWE-79 Description: Stored cross-site scripting (XSS) vulnerability in desknet's NEO V9.0R2.0 and earlier allow execution of arbitrary JavaScript in a user’s web browser. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.desknets.com/neo/support/mainte/17475/ - https://jvn.jp/en/jp/JVN90757550/
CVE ID: CVE-2025-54860 State: PUBLISHED Published: 2025-09-18T21:20:20.243Z Last Updated: 2025-09-19T13:15:40.179Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H) Vendors: Cognex Products: In-Sight 2000 series, In-Sight 7000 series, In-Sight 8000 series, In-Sight 9000 series, In-Sight Explorer Problem Types: CWE-307 Description: Cognex In-Sight Explorer and In-Sight Camera Firmware expose a telnet-based service on port 23 in order to allow management operations on the device such as firmware upgrades and device reboot requiring an authentication. A wrong management of login failures of the service allows a denial-of-service attack, leaving the telnet service into an un
ong management of login failures of the service allows a denial-of-service attack, leaving the telnet service into an unreachable state. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-25-261-06
CVE ID: CVE-2025-54862 State: PUBLISHED Published: 2025-08-18T21:23:42.930Z Last Updated: 2025-08-19T19:22:39.830Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Santesoft Products: Sante PACS Server Problem Types: CWE-79 Description: Sante PACS Server web portal is vulnerable to stored cross-site scripting. An attacker could inject malicious HTML codes redirecting a user to a malicious webpage and stealing the user's cookie. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-medical-advisories/icsma-25-224-01
CVE ID: CVE-2025-54863 State: PUBLISHED Published: 2025-11-04T16:13:03.327Z Last Updated: 2025-11-04T16:31:15.814Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Radiometrics Products: VizAir Problem Types: CWE-522 Description: Radiometrics VizAir is vulnerable to exposure of the system's REST API key through a publicly accessible configuration file. This allows attackers to remotely alter weather data and configurations, automate attacks against multiple instances, and extract sensitive meteorological data, which could potentially compromise airport operations. Additionally, attackers could flood the system with false alerts, leading to a denial-of-servic
mise airport operations. Additionally, attackers could flood the system with false alerts, leading to a denial-of-service condition and significant disruption to airport operations. Unauthorized remote control over aviation weather monitoring and data manipulation could result in incorrect flight planning and hazardous takeoff and landing conditions. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-25-308-04 - https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-308-04.json
CVE ID: CVE-2025-54864 State: PUBLISHED Published: 2025-08-12T15:48:54.115Z Last Updated: 2025-08-12T16:06:33.566Z Vendors: NixOS Products: hydra Problem Types: CWE-306 Description: Hydra is a continuous integration service for Nix based projects. Prior to commit f7bda02, /api/push-github and /api/push-gitea are called by the corresponding forge without HTTP Basic authentication. Both forges do however feature HMAC signing with a secret key. Triggering an evaluation can be very taxing on the infrastructure when large evaluations are done, introducing potential denial of service attacks on the host running the evaluator. This issue has been patched by commit f7bda02. A workaround involves blo
vice attacks on the host running the evaluator. This issue has been patched by commit f7bda02. A workaround involves blocking /api/push-github and /api/push-gitea via a reverse proxy. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/NixOS/hydra/security/advisories/GHSA-qpq3-646c-vgx9 - https://github.com/NixOS/hydra/commit/f7bda020c6144913f134ec616783e57817f7686f
CVE ID: CVE-2025-54865 State: PUBLISHED Published: 2025-08-05T00:03:46.948Z Last Updated: 2025-08-07T15:51:40.364Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: FTB-Gamepedia Products: Tilesheets Problem Types: CWE-89 Description: Tilesheets MediaWiki Extension adds a table lookup parser function for an item and returns the requested image. A missing backtick in a query executed by the Tilesheets extension allows users to insert and potentially execute malicious SQL code. This issue has not been fixed. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/FTB-Gamepedia/Tilesheets/security/advisories/GHSA-hqfr-7cm9-4h87 - https:/
ulnrichment: References: - https://github.com/FTB-Gamepedia/Tilesheets/security/advisories/GHSA-hqfr-7cm9-4h87 - https://github.com/FTB-Gamepedia/Tilesheets/blob/8debbf8ee6ddb02bf9c756bab5c085b007d72c50/special/SheetManager.php#L255
CVE ID: CVE-2025-54866 State: PUBLISHED Published: 2025-11-21T18:23:49.530Z Last Updated: 2025-11-21T18:33:23.442Z Vendors: wazuh Products: wazuh Problem Types: CWE-276 Description: Wazuh is a free and open source platform used for threat prevention, detection, and response. From version 4.3.0 to before 4.13.0, a missing ACL on "C:\Program Files (x86)\ossec-agent\authd.pass" exposes the password to all "Authenticated Users" on the local machine. This issue has been patched in version 4.13.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/wazuh/wazuh/security/advisories/GHSA-mvfx-ph7m-qm37 - https://github.com/wazuh/wazuh/pull/31187 - https://github.com/wa
/wazuh/wazuh/security/advisories/GHSA-mvfx-ph7m-qm37 - https://github.com/wazuh/wazuh/pull/31187 - https://github.com/wazuh/wazuh/commit/606f19e688944ebe5d28d72eb81ac36f8fffb143 - https://github.com/wazuh/wazuh/releases/tag/v4.13.0
CVE ID: CVE-2025-54867 State: PUBLISHED Published: 2025-08-14T16:08:00.622Z Last Updated: 2025-08-14T19:26:11.541Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: youki-dev Products: youki Problem Types: CWE-61 Description: Youki is a container runtime written in Rust. Prior to version 0.5.5, if /proc and /sys in the rootfs are symbolic links, they can potentially be exploited to gain access to the host root filesystem. This issue has been patched in version 0.5.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/youki-dev/youki/security/advisories/GHSA-j26p-6wx7-f3pw - https://github.com/youki-dev/youki/commit/0d9b4f2aa5ceaf98
com/youki-dev/youki/security/advisories/GHSA-j26p-6wx7-f3pw - https://github.com/youki-dev/youki/commit/0d9b4f2aa5ceaf988f3eb568711d2acf0a4ace37 - https://github.com/youki-dev/youki/releases/tag/v0.5.5
CVE ID: CVE-2025-54868 State: PUBLISHED Published: 2025-08-05T04:53:08.166Z Last Updated: 2025-08-05T16:19:02.005Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: danny-avila Products: LibreChat Problem Types: CWE-285 Description: LibreChat is a ChatGPT clone with additional features. In versions 0.0.6 through 0.7.7-rc1, an exposed testing endpoint allows reading arbitrary chats directly from the Meilisearch engine. The endpoint /api/search/test allows for direct access to stored chats in the Meilisearch engine without proper access control. This results in the ability to read chats from arbitrary users. This issue is fixed in version 0.7.7. Additional Analyst
This results in the ability to read chats from arbitrary users. This issue is fixed in version 0.7.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/danny-avila/LibreChat/security/advisories/GHSA-p5j8-m4wh-ffmw - https://github.com/danny-avila/LibreChat/commit/0e8041bcac616949c42a68dfb8f108ccc4db5151
CVE ID: CVE-2025-54869 State: PUBLISHED Published: 2025-08-05T23:34:17.937Z Last Updated: 2025-08-07T14:02:48.590Z Vendors: Setasign Products: FPDI Problem Types: CWE-770 Description: FPDI is a collection of PHP classes that facilitate reading pages from existing PDF documents and using them as templates in FPDF. In versions 2.6.2 and below, any application that uses FPDI to process user-supplied PDF files is at risk, causing a Denial of Service (DoS) vulnerability. An attacker can upload a small, malicious PDF file that will cause the server-side script to crash due to memory exhaustion. Repeated attacks can lead to sustained service unavailability. This issue is fixed in version 2.6.3. Add
ory exhaustion. Repeated attacks can lead to sustained service unavailability. This issue is fixed in version 2.6.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Setasign/FPDI/security/advisories/GHSA-jxhh-4648-vpp3 - https://github.com/Setasign/FPDI/commit/ba671ba9221cffd32c2dda87316c19f522a1c5f0
CVE ID: CVE-2025-54870 State: PUBLISHED Published: 2025-08-05T00:02:38.457Z Last Updated: 2025-08-05T14:56:26.901Z Vendors: leakingmemory Products: vtun-ng Problem Types: CWE-636 Description: VTun-ng is a Virtual Tunnel over TCP/IP network. In versions 3.0.17 and below, failure to initialize encryption modules might cause reversion to plaintext due to insufficient error handling. The bug was first introduced in VTun-ng version 3.0.12. This is fixed in version 3.0.18. To workaround this issue, avoid blowfish-256. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/leakingmemory/vtun-ng/security/advisories/GHSA-m3jc-27c6-2wrf - https://github.com/leakingmemory/v
- https://github.com/leakingmemory/vtun-ng/security/advisories/GHSA-m3jc-27c6-2wrf - https://github.com/leakingmemory/vtun-ng/commit/8c63982b6c487c52db1d56ab94c266f0bc857140
CVE ID: CVE-2025-54871 State: PUBLISHED Published: 2025-08-05T00:03:09.902Z Last Updated: 2025-08-05T14:55:27.686Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: steveseguin Products: electroncapture Problem Types: CWE-284 Description: Electron Capture facilitates video playback for screen-sharing and capture. In versions 2.19.1 and below, the elecap app on macOS allows local unprivileged users to bypass macOS TCC privacy protections by enabling ELECTRON_RUN_AS_NODE. This environment variable allows arbitrary Node.js code to be executed via the -e flag, which runs inside the main Electron context, inheriting any previously granted TCC entitlements (such as
a the -e flag, which runs inside the main Electron context, inheriting any previously granted TCC entitlements (such as access to Documents, Downloads, etc.). This issue is fixed in version 2.20.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/steveseguin/electroncapture/security/advisories/GHSA-8849-p3j4-jq4h - https://github.com/steveseguin/electroncapture/commit/3837f54e75911bb99fa45cfa138a5e401d16f531 - https://github.com/steveseguin/electroncapture/releases/tag/2.20.0
CVE ID: CVE-2025-54872 State: PUBLISHED Published: 2025-08-05T23:40:46.900Z Last Updated: 2025-08-06T20:33:38.316Z Vendors: Vessel9817 Products: onion-site-template Problem Types: CWE-798 Description: onion-site-template is a complete, scalable tor hidden service self-hosting sample. Versions which include commit 3196bd89 contain a baked-in tor image if the secrets were copied from an existing onion domain. A website could be compromised if a user shared the baked-in image, or if someone were able to acquire access to the user's device outside of a containerized environment. This is fixed by commit bc9ba0fd. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/
. This is fixed by commit bc9ba0fd. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Vessel9817/onion-site-template/security/advisories/GHSA-mj8m-c8w9-rw55 - https://github.com/Vessel9817/onion-site-template/commit/bc9ba0fd8cc7fbb3abc6759b351885a4501bce84
CVE ID: CVE-2025-54873 State: PUBLISHED Published: 2025-08-05T23:35:09.208Z Last Updated: 2025-08-06T13:53:46.107Z Vendors: risc0 Products: risc0 Problem Types: CWE-369 Description: RISC Zero is a zero-knowledge verifiable general computing platform based on zk-STARKs and the RISC-V microarchitecture. RISC packages risc0-zkvm versions 2.0.0 through 2.1.0 and risc0-circuit-rv32im and risc0-circuit-rv32im-sys versions 2.0.0 through 2.0.4 contain vulnerabilities where signed integer division allows multiple outputs for certain inputs with only one being valid, and division by zero results are underconstrained. This issue is fixed in risc0-zkvm version 2.2.0 and version 3.0.0 for the risc0-circu
zero results are underconstrained. This issue is fixed in risc0-zkvm version 2.2.0 and version 3.0.0 for the risc0-circuit-rv32im and risc0-circuit-rv32im-sys packages. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/risc0/risc0/security/advisories/GHSA-f6rc-24x4-ppxp - https://github.com/risc0/risc0/pull/3235 - https://github.com/risc0/zirgen/pull/249
CVE ID: CVE-2025-54874 State: PUBLISHED Published: 2025-08-05T14:33:17.323Z Last Updated: 2025-09-26T21:55:42.071Z Vendors: uclouvain Products: openjpeg Problem Types: CWE-457 Description: OpenJPEG is an open-source JPEG 2000 codec. In OpenJPEG from 2.5.1 through 2.5.3, a call to opj_jp2_read_header may lead to OOB heap memory write when the data stream p_stream is too short and p_image is not initialized. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/uclouvain/openjpeg/commit/f809b80c67717c152a5ad30bf06774f00da4fd2d - https://github.com/uclouvain/openjpeg/pull/1573 - https://securitylab.github.com/advisories/GHSL-2025-057_OpenCV
CVE ID: CVE-2025-54875 State: PUBLISHED Published: 2025-09-29T21:29:50.136Z Last Updated: 2025-09-30T14:55:56.331Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: FreshRSS Products: FreshRSS Problem Types: CWE-284 Description: FreshRSS is a free, self-hostable RSS aggregator. In versions 1.16.0 and above through 1.26.3, an unprivileged attacker can create a new admin user when registration is enabled through the use of a hidden field used only in the user management admin page, new_user_is_admin. This is fixed in version 1.27.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/FreshRSS/FreshRSS/security/advisories/GHSA-h6
l Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/FreshRSS/FreshRSS/security/advisories/GHSA-h625-ghr3-jppq - https://github.com/FreshRSS/FreshRSS/pull/7783 - https://github.com/FreshRSS/FreshRSS/releases/tag/1.27.0
CVE ID: CVE-2025-54876 State: PUBLISHED Published: 2025-08-05T23:35:51.900Z Last Updated: 2025-08-06T13:52:08.153Z Vendors: JanssenProject Products: jans Problem Types: CWE-522 Description: The Janssen Project is an open-source identity and access management (IAM) platform. In versions 1.9.0 and below, Janssen stores passwords in plaintext in the local cli_cmd.log file. This is fixed in the nightly prerelease. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/JanssenProject/jans/security/advisories/GHSA-2f4x-m695-jvp3 - https://github.com/JanssenProject/jans/pull/11903/commits/5260520e8d7ce1d1b8387c71b3571f20e643f110 - https://github.com/JanssenProject/jans/
anssenProject/jans/pull/11903/commits/5260520e8d7ce1d1b8387c71b3571f20e643f110 - https://github.com/JanssenProject/jans/discussions/11886
CVE ID: CVE-2025-54877 State: PUBLISHED Published: 2025-08-29T15:07:54.950Z Last Updated: 2025-08-29T15:23:44.584Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Enalean Products: tuleap Problem Types: CWE-863 Description: Tuleap is an Open Source Suite created to facilitate management of software development and collaboration. In Tuleap Community Edition versions before 16.10.99.1754050155 and Tuleap Enterprise Edition versions before 16.9-8 and before 16.10-5, an attacker can access to the content of the special and always there fields of accessible artifacts even if the permissions associated with the underlying fields do not allow it. This issue has bee
f accessible artifacts even if the permissions associated with the underlying fields do not allow it. This issue has been fixed in Tuleap Community Edition version 16.10.99.1754050155 and Tuleap Enterprise Edition versions 16.9-8 and 16.10-5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Enalean/tuleap/security/advisories/GHSA-m5qc-c3q5-2p29 - https://github.com/Enalean/tuleap/commit/b0c1328f96135ee6a3f84d0847be5f843eafa590 - https://tuleap.net/plugins/git/tuleap/tuleap/stable?a=commit&h=b0c1328f96135ee6a3f84d0847be5f843eafa590 - https://tuleap.net/plugins/tracker/?aid=44068
CVE ID: CVE-2025-54878 State: PUBLISHED Published: 2025-08-11T20:40:15.073Z Last Updated: 2025-08-11T20:55:54.669Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H) Vendors: nasa Products: CryptoLib Problem Types: CWE-122 Description: CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between a spacecraft running the core Flight System (cFS) and a ground station. A heap buffer overflow vulnerability exists in NASA CryptoLib version 1.4.0 and prior in the IV setup logic for telecommand frames. The problem arises from missing bounds checks when copying the Initialization Vec
IV setup logic for telecommand frames. The problem arises from missing bounds checks when copying the Initialization Vector (IV) into a freshly allocated buffer. An attacker can supply a crafted TC frame that causes the library to write one byte past the end of the heap buffer, leading to heap corruption and undefined behaviour. An attacker supplying a malformed telecommand frame can corrupt heap memory. This leads to undefined behaviour, which could manifest itself as a crash (denial of service) or more severe exploitation. This issue has been patched in version 1.4.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/nasa/CryptoLib/security/advisories/GHSA
itional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/nasa/CryptoLib/security/advisories/GHSA-9qph-pxfm-q9g4 - https://github.com/nasa/CryptoLib/commit/9b5b294ec09da450d2d4d05aea2db604ead48be1
CVE ID: CVE-2025-54879 State: PUBLISHED Published: 2025-08-05T23:39:59.130Z Last Updated: 2025-08-06T20:32:56.740Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: mastodon Products: mastodon Problem Types: CWE-770 Description: Mastodon is a free, open-source social network server based on ActivityPub Mastodon which facilitates LDAP configuration for authentication. In versions 3.1.5 through 4.2.24, 4.3.0 through 4.3.11 and 4.4.0 through 4.4.3, Mastodon's rate-limiting system has a critical configuration error where the email-based throttle for confirmation emails incorrectly checks the password reset path instead of the confirmation path, effectively disabli
for confirmation emails incorrectly checks the password reset path instead of the confirmation path, effectively disabling per-email limits for confirmation requests. This allows attackers to bypass rate limits by rotating IP addresses and send unlimited confirmation emails to any email address, as only a weak IP-based throttle (25 requests per 5 minutes) remains active. The vulnerability enables denial-of-service attacks that can overwhelm mail queues and facilitate user harassment through confirmation email spam. This is fixed in versions 4.2.24, 4.3.11 and 4.4.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/mastodon/mastodon/security/advisories/GHSA-
nal Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/mastodon/mastodon/security/advisories/GHSA-84ch-6436-c7mg - https://github.com/mastodon/mastodon/commit/e2592419d93fb41be03c2f3ff6a122fecb0e0952 - https://github.com/mastodon/mastodon/releases/tag/v4.4.3
CVE ID: CVE-2025-54880 State: PUBLISHED Published: 2025-08-19T16:58:41.120Z Last Updated: 2025-08-19T17:09:32.759Z Vendors: mermaid-js Products: mermaid Problem Types: CWE-79 Description: Mermaid is a JavaScript based diagramming and charting tool that uses Markdown-inspired text definitions and a renderer to create and modify complex diagrams. In the default configuration of mermaid 11.9.0 and earlier, user supplied input for architecture diagram icons is passed to the d3 html() method, creating a sink for cross site scripting. This vulnerability is fixed in 11.10.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/mermaid-js/mermaid/security/advisories/GH
ional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/mermaid-js/mermaid/security/advisories/GHSA-8gwm-58g9-j8pw - https://github.com/mermaid-js/mermaid/commit/2aa83302795183ea5c65caec3da1edd6cb4791fc - https://github.com/mermaid-js/mermaid/commit/734bde38777c9190a5a72e96421c83424442d4e4
CVE ID: CVE-2025-54881 State: PUBLISHED Published: 2025-08-19T17:04:29.453Z Last Updated: 2025-08-19T18:14:04.599Z Vendors: mermaid-js Products: mermaid Problem Types: CWE-79 Description: Mermaid is a JavaScript based diagramming and charting tool that uses Markdown-inspired text definitions and a renderer to create and modify complex diagrams. In the default configuration of mermaid 10.9.0-rc.1 to 11.9.0, user supplied input for sequence diagram labels is passed to innerHTML during calculation of element size, causing XSS. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/mermaid-js/mermaid/security/advisories/GHSA-7rqq-prvp-x9jh - https://github.com/mermai
References: - https://github.com/mermaid-js/mermaid/security/advisories/GHSA-7rqq-prvp-x9jh - https://github.com/mermaid-js/mermaid/commit/5c69e5fdb004a6d0a2abe97e23d26e223a059832 - https://github.com/mermaid-js/mermaid/commit/685516a85ec1df64cefd4fd15f26533be87d458e
CVE ID: CVE-2025-54882 State: PUBLISHED Published: 2025-08-07T00:02:09.263Z Last Updated: 2025-08-07T14:32:00.582Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) Vendors: himmelblau-idm Products: himmelblau Problem Types: CWE-522 Description: Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune. In versions 0.8.0 through 0.9.21 and 1.0.0-beta through 1.1.0, Himmelblau stores the cloud TGT received during logon in the Kerberos credential cache. The created credential cache collection and received credentials are stored as world readable. This is fixed in versions 0.9.22 and 1.2.0. To work around this issue, remove all read access to Himmelbla