Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
d, are also not being sanitized. This issue is fixed in version 0.10.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/charmbracelet/soft-serve/security/advisories/GHSA-fv2r-r8mp-pg48 - https://github.com/charmbracelet/soft-serve/commit/d9639320b8d0ccd76fe6836a042c042b0ebde549
CVE ID: CVE-2025-64495 State: PUBLISHED Published: 2025-11-08T01:25:48.995Z Last Updated: 2025-11-10T15:09:23.638Z Severity: HIGH (CVSS 8.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N) Vendors: open-webui Products: open-webui Problem Types: CWE-79 Description: Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. In versions 0.6.34 and below, the functionality that inserts custom prompts into the chat window is vulnerable to DOM XSS when 'Insert Prompt as Rich Text' is enabled, since the prompt body is assigned to the DOM sink .innerHtml without sanitisation. Any user with permissions to create prompts can abuse this to plant a payload that could
innerHtml without sanitisation. Any user with permissions to create prompts can abuse this to plant a payload that could be triggered by other users if they run the corresponding / command to insert the prompt. This issue is fixed in version 0.6.35. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/open-webui/open-webui/security/advisories/GHSA-w7xj-8fx7-wfch - https://github.com/open-webui/open-webui/commit/eb9c4c0e358c274aea35f21c2856c0a20051e5f1 - https://github.com/open-webui/open-webui/blob/7a83e7dfa367d19f762ec17cac5e4a94ea2bd97d/src/lib/components/common/RichTextInput.svelte#L348
CVE ID: CVE-2025-64496 State: PUBLISHED Published: 2025-11-08T01:29:02.654Z Last Updated: 2025-11-13T21:37:59.663Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N) Vendors: open-webui Products: open-webui Problem Types: CWE-95, CWE-829, CWE-830, CWE-501 Description: Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Versions 0.6.224 and prior contain a code injection vulnerability in the Direct Connections feature that allows malicious external model servers to execute arbitrary JavaScript in victim browsers via Server-Sent Event (SSE) execute events. This leads to authentication token theft, complete account takeover, and
ers via Server-Sent Event (SSE) execute events. This leads to authentication token theft, complete account takeover, and when chained with the Functions API, enables remote code execution on the backend server. The attack requires the victim to enable Direct Connections (disabled by default) and add the attacker's malicious model URL, achievable through social engineering of the admin and subsequent users. This issue is fixed in version 0.6.35. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/open-webui/open-webui/security/advisories/GHSA-cm35-v4vp-5xvx - https://github.com/open-webui/open-webui/commit/8af6a4cf21b756a66cd58378a01c60f74c39b7ca
CVE ID: CVE-2025-64500 State: PUBLISHED Published: 2025-11-12T21:40:57.738Z Last Updated: 2025-11-13T16:50:55.341Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: symfony Products: symfony Problem Types: CWE-647 Description: Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Symfony's HttpFoundation component defines an object-oriented layer for the HTTP specification. Starting in version 2.0.0 and prior to version 5.4.50, 6.4.29, and 7.3.7, the `Request` class improperly interprets some `PATH_INFO` in a way that leads to representing some URLs with a path that doesn't start with a `/`. This can allow bypassing so
FO` in a way that leads to representing some URLs with a path that doesn't start with a `/`. This can allow bypassing some access control rules that are built with this `/`-prefix assumption. Starting in versions 5.4.50, 6.4.29, and 7.3.7, the `Request` class now ensures that URL paths always start with a `/`. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/symfony/symfony/security/advisories/GHSA-3rg7-wf37-54rm - https://github.com/symfony/symfony/commit/9962b91b12bb791322fa73836b350836b6db7cac - https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/http-foundation/CVE-2025-64500.yaml - https://github.com/FriendsOfPHP/security-advisories
advisories/blob/master/symfony/http-foundation/CVE-2025-64500.yaml - https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/symfony/CVE-2025-64500.yaml - https://symfony.com/blog/cve-2025-64500-incorrect-parsing-of-path-info-can-lead-to-limited-authorization-bypass
CVE ID: CVE-2025-64501 State: PUBLISHED Published: 2025-11-10T21:37:01.010Z Last Updated: 2025-11-12T20:14:32.113Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N) Vendors: etaminstudio Products: prosemirror_to_html Problem Types: CWE-79 Description: ProsemirrorToHtml is a JSON converter which takes ProseMirror-compatible JSON and outputs HTML. In versions 0.2.0 and below, the `prosemirror_to_html` gem is vulnerable to Cross-Site Scripting (XSS) attacks through malicious HTML attribute values. While tag content is properly escaped, attribute values are not, allowing attackers to inject arbitrary JavaScript code. Applications that use `prosemirror_to_html` to convert Pro
not, allowing attackers to inject arbitrary JavaScript code. Applications that use `prosemirror_to_html` to convert ProseMirror documents to HTML, user-generated ProseMirror content, and end users viewing the rendered HTML output are all at risk of attack. This issue is fixed in version 0.2.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/etaminstudio/prosemirror_to_html/security/advisories/GHSA-52c5-vh7f-26fx - https://github.com/etaminstudio/prosemirror_to_html/commit/4d59f94f550bcabeec30d298791bbdd883298ad8
CVE ID: CVE-2025-64502 State: PUBLISHED Published: 2025-11-10T21:40:33.698Z Last Updated: 2025-11-12T20:14:25.114Z Vendors: parse-community Products: parse-server Problem Types: CWE-201 Description: Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. The MongoDB `explain()` method provides detailed information about query execution plans, including index usage, collection scanning behavior, and performance metrics. Prior to version 8.5.0-alpha.5, Parse Server permits any client to execute explain queries without requiring the master key. This exposes database schema structure and field names, index configurations and query optimization deta
the master key. This exposes database schema structure and field names, index configurations and query optimization details, query execution statistics and performance metrics, and potential attack vectors for database performance exploitation. In version 8.5.0-alpha.5, a new `databaseOptions.allowPublicExplain` configuration option has been introduced that allows to restrict `explain` queries to the master key. The option defaults to `true` for now to avoid a breaking change in production systems that depends on public `explain` availability. In addition, a security warning is logged when the option is not explicitly set, or set to `true`. In a future major release of Parse Server, the defa
g is logged when the option is not explicitly set, or set to `true`. In a future major release of Parse Server, the default will change to `false`. As a workaround, implement middleware to block explain queries from non-master-key requests, or monitor and alert on explain query usage in production environments. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/parse-community/parse-server/security/advisories/GHSA-7cx5-254x-cgrq - https://github.com/parse-community/parse-server/pull/9890 - https://github.com/parse-community/parse-server/commit/4456b02280c2d8dd58b7250e9e67f1a8647b3452
CVE ID: CVE-2025-64503 State: PUBLISHED Published: 2025-11-12T22:04:03.750Z Last Updated: 2025-11-13T16:56:18.053Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: OpenPrinting Products: cups-filters Problem Types: CWE-787 Description: cups-filters contains backends, filters, and other software required to get the cups printing service working on operating systems other than macos. In cups-filters prior to 1.28.18, by crafting a PDF file with a large `MediaBox` value, an attacker can cause CUPS-Filter 1.x’s `pdftoraster` tool to write beyond the bounds of an array. First, a PDF with a large `MediaBox` width value causes `header.cupsWidth` to become large. Next,
he bounds of an array. First, a PDF with a large `MediaBox` width value causes `header.cupsWidth` to become large. Next, the calculation of `bytesPerLine = (header.cupsBitsPerPixel * header.cupsWidth + 7) / 8` overflows, resulting in a small value. Then, `lineBuf` is allocated with the small `bytesPerLine` size. Finally, `convertLineChunked` calls `writePixel8`, which attempts to write to `lineBuf` outside of its buffer size (out of bounds write). In libcupsfilters, the maintainers found the same `bytesPerLine` multiplication without overflow check, but the provided test case does not cause an overflow there, because the values are different. Commit 50d94ca0f2fa6177613c97c59791bde568631865 c
se does not cause an overflow there, because the values are different. Commit 50d94ca0f2fa6177613c97c59791bde568631865 contains a patch, which is incorporated into cups-filters version 1.28.18. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/OpenPrinting/cups-filters/security/advisories/GHSA-893j-2wr2-wrh9 - https://github.com/OpenPrinting/cups-filters/commit/50d94ca0f2fa6177613c97c59791bde568631865 - https://github.com/OpenPrinting/cups-filters/blob/aea8d0db017e495b0204433ebdb0e86b4871094c/filter/pdftoraster.cxx#L1620 - https://github.com/OpenPrinting/cups-filters/blob/aea8d0db017e495b0204433ebdb0e86b4871094c/filter/pdftoraster.cx
L1620 - https://github.com/OpenPrinting/cups-filters/blob/aea8d0db017e495b0204433ebdb0e86b4871094c/filter/pdftoraster.cxx#L1880 - https://github.com/OpenPrinting/libcupsfilters/blob/1dd86d835b27ed149b66aee1a4853d1db8a1f44c/cupsfilters/pdftoraster.cxx#L1790
CVE ID: CVE-2025-64504 State: PUBLISHED Published: 2025-11-10T21:51:36.603Z Last Updated: 2025-11-12T20:13:56.630Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N) Vendors: langfuse Products: langfuse Problem Types: CWE-202 Description: Langfuse is an open source large language model engineering platform. Starting in version 2.70.0 and prior to versions 2.95.11 and 3.124.1, in certain project membership APIs, the server trusted a user‑controlled orgId and used it in authorization checks. As a result, any authenticated user on the same Langfuse instance could enumerate names and email addresses of users in another organization if they knew the target organization’s ID. D
could enumerate names and email addresses of users in another organization if they knew the target organization’s ID. Disclosure is limited to names and email addresses of members/invitees. No customer data such as traces, prompts, or evaluations is exposed or accessible. For Langfuse Cloud, the maintainers ran a thorough investigation of access logs of the last 30 days and could not find any evidence that this vulnerability was exploited. For most self-hosting deployments, the attack surface is significantly reduced given an SSO provider is configured and email/password sign-up is disabled. In these cases, only users who authenticate via the Enterprise SSO IdP (e.g. Okta) would be able to
ign-up is disabled. In these cases, only users who authenticate via the Enterprise SSO IdP (e.g. Okta) would be able to exploit this vulnerability to access the member list, i.e. internal users getting access to a list of other internal users. In order to exploit the vulnerability, the actor must have a valid Langfuse user account within the same instance, know the target orgId, and use the request made to the API that powers the frontend membership tables, including their project/user authentication token, while changing the orgId to the target organization. Langfuse Cloud (EU, US, HIPAA) were affected until fix deployment on November 1, 2025. The maintainers reviewed the Langfuse Cloud acc
(EU, US, HIPAA) were affected until fix deployment on November 1, 2025. The maintainers reviewed the Langfuse Cloud access logs from the past 30 days and found no evidence that this vulnerability was exploited. Self-Hosted versions which contain patches include v2.95.11 for major version 2 and v3.124.1 for major version 3. There are no known workarounds. Upgrading is required to fully mitigate this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/langfuse/langfuse/security/advisories/GHSA-94hf-6gqq-pj69 - https://github.com/langfuse/langfuse/commit/67990ebfdcf0f0c32a6710efa7ddbda073812ab4 - https://github.com/langfuse/langfuse/commit/6c2529049a4c962
e/langfuse/commit/67990ebfdcf0f0c32a6710efa7ddbda073812ab4 - https://github.com/langfuse/langfuse/commit/6c2529049a4c962928c435984c81a547a497e3e5 - https://github.com/langfuse/langfuse/releases/tag/v2.70.0 - https://github.com/langfuse/langfuse/releases/tag/v2.95.11 - https://github.com/langfuse/langfuse/releases/tag/v3.124.1
CVE ID: CVE-2025-64505 State: PUBLISHED Published: 2025-11-24T23:38:40.405Z Last Updated: 2025-11-24T23:38:40.405Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H) Vendors: pnggroup Products: libpng Problem Types: CWE-125 Description: LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. Prior to version 1.6.51, a heap buffer over-read vulnerability exists in libpng's png_do_quantize function when processing PNG files with malformed palette indices. The vulnerability occurs when palette_lookup array bounds are not validated against externally-supplied image data, allowing an attacker
y occurs when palette_lookup array bounds are not validated against externally-supplied image data, allowing an attacker to craft a PNG file with out-of-range palette indices that trigger out-of-bounds memory access. This issue has been patched in version 1.6.51. References: - https://github.com/pnggroup/libpng/security/advisories/GHSA-4952-h5wq-4m42 - https://github.com/pnggroup/libpng/pull/748 - https://github.com/pnggroup/libpng/commit/6a528eb5fd0dd7f6de1c39d30de0e41473431c37
CVE ID: CVE-2025-64506 State: PUBLISHED Published: 2025-11-24T23:41:09.207Z Last Updated: 2025-11-24T23:41:09.207Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H) Vendors: pnggroup Products: libpng Problem Types: CWE-125 Description: LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From version 1.6.0 to before 1.6.51, a heap buffer over-read vulnerability exists in libpng's png_write_image_8bit function when processing 8-bit images through the simplified write API with convert_to_8bit enabled. The vulnerability affects 8-bit grayscale+alpha, RGB/RGBA, and images with incomplete
API with convert_to_8bit enabled. The vulnerability affects 8-bit grayscale+alpha, RGB/RGBA, and images with incomplete row data. A conditional guard incorrectly allows 8-bit input to enter code expecting 16-bit input, causing reads up to 2 bytes beyond allocated buffer boundaries. This issue has been patched in version 1.6.51. References: - https://github.com/pnggroup/libpng/security/advisories/GHSA-qpr4-xm66-hww6 - https://github.com/pnggroup/libpng/pull/749 - https://github.com/pnggroup/libpng/commit/2bd84c019c300b78e811743fbcddb67c9d9bf821
CVE ID: CVE-2025-64507 State: PUBLISHED Published: 2025-11-10T21:56:26.578Z Last Updated: 2025-11-12T20:13:48.233Z Vendors: lxc Products: incus Problem Types: CWE-269 Description: Incus is a system container and virtual machine manager. An issue in versions prior to 6.0.6 and 6.19.0 affects any Incus user in an environment where an unprivileged user may have root access to a container with an attached custom storage volume that has the `security.shifted` property set to `true` as well as access to the host as an unprivileged user. The most common case for this would be systems using `incus-user` with the less privileged `incus` group to provide unprivileged users with an isolated restricted
ems using `incus-user` with the less privileged `incus` group to provide unprivileged users with an isolated restricted access to Incus. Such users may be able to create a custom storage volume with the necessary property (depending on kernel and filesystem support) and can then write a setuid binary from within the container which can be executed as an unprivileged user on the host to gain root privileges. A patch for this issue is expected in versions 6.0.6 and 6.19.0. As a workaround, permissions can be manually restricted until a patched version of Incus is deployed. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/lxc/incus/security/advisories/GHSA-56m
ditional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/lxc/incus/security/advisories/GHSA-56mx-8g9f-5crf - https://github.com/lxc/incus/issues/2641 - https://github.com/lxc/incus/pull/2642
CVE ID: CVE-2025-64508 State: PUBLISHED Published: 2025-11-10T21:44:24.832Z Last Updated: 2025-11-12T20:14:15.890Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: bugsink Products: bugsink Problem Types: CWE-770 Description: Bugsink is a self-hosted error tracking tool. In versions prior to 2.0.5, brotli "bombs" (highly compressed brotli streams, such as many zeros) can be sent to the server. Since the server will attempt to decompress these streams before applying various maximums, this can lead to exhaustion of the available memory and thus a Denial of Service. This can be done if the `DSN` is known, which it is in many common setups (JavaScript, Mobile Apps
a Denial of Service. This can be done if the `DSN` is known, which it is in many common setups (JavaScript, Mobile Apps). The issue is patched in Bugsink version `2.0.5`. The vulnerability is similar to, but distinct from, another brotli-related problem in Bugsink, GHSA-rrx3-2x4g-mq2h/CVE-2025-64509. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/bugsink/bugsink/security/advisories/GHSA-fc2v-vcwj-269v - https://github.com/google/brotli/issues/1327 - https://github.com/google/brotli/issues/1375 - https://github.com/bugsink/bugsink/pull/266 - https://github.com/google/brotli/pull/1234 - https://github.com/bugsink/bugsink/commit/3f65544aab3ad5303d9700913664
66 - https://github.com/google/brotli/pull/1234 - https://github.com/bugsink/bugsink/commit/3f65544aab3ad5303d97009136640de97b0676a5 - https://github.com/google/brotli/commit/67d78bc41db1a0d03f2e763497748f2f69946627 - https://github.com/google/brotli/releases/tag/v1.2.0
CVE ID: CVE-2025-64509 State: PUBLISHED Published: 2025-11-10T21:46:11.117Z Last Updated: 2025-11-12T20:14:08.231Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: bugsink Products: bugsink Problem Types: CWE-770 Description: Bugsink is a self-hosted error tracking tool. In versions prior to 2.0.6, a specially crafted Brotli-compressed envelope can cause Bugsink to spend excessive CPU time in decompression, leading to denial of service. This can be done if the DSN is known, which it is in many common setups (JavaScript, Mobile Apps). The issue is patched in Bugsink 2.0.6. The vulnerability is similar to, but distinct from, another brotli-related problem in Bugs
is patched in Bugsink 2.0.6. The vulnerability is similar to, but distinct from, another brotli-related problem in Bugsink, GHSA-fc2v-vcwj-269v/CVE-2025-64508. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/bugsink/bugsink/security/advisories/GHSA-rrx3-2x4g-mq2h
CVE ID: CVE-2025-64511 State: PUBLISHED Published: 2025-11-13T15:51:53.788Z Last Updated: 2025-11-13T16:17:00.321Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L) Vendors: 1Panel-dev Products: MaxKB Problem Types: CWE-918 Description: MaxKB is an open-source AI assistant for enterprise. In versions prior to 2.3.1, a user can access internal network services such as databases through Python code in the tool module, although the process runs in a sandbox. Version 2.3.1 fixes the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/1Panel-dev/MaxKB/security/advisories/GHSA-9287-g7px-9rp4
CVE ID: CVE-2025-64512 State: PUBLISHED Published: 2025-11-10T21:58:37.950Z Last Updated: 2025-11-19T00:12:35.732Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: pdfminer Products: pdfminer.six Problem Types: CWE-502 Description: Pdfminer.six is a community maintained fork of the original PDFMiner, a tool for extracting information from PDF documents. Prior to version 20251107, pdfminer.six will execute arbitrary code from a malicious pickle file if provided with a malicious PDF file. The `CMapDB._load_data()` function in pdfminer.six uses `pickle.loads()` to deserialize pickle files. These pickle files are supposed to be part of the pdfminer.six distribution
pickle.loads()` to deserialize pickle files. These pickle files are supposed to be part of the pdfminer.six distribution stored in the `cmap/` directory, but a malicious PDF can specify an alternative directory and filename as long as the filename ends in `.pickle.gz`. A malicious, zipped pickle file can then contain code which will automatically execute when the PDF is processed. Version 20251107 fixes the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/pdfminer/pdfminer.six/security/advisories/GHSA-wf5f-4jwr-ppcp - https://github.com/pdfminer/pdfminer.six/commit/b808ee05dd7f0c8ea8ec34bdf394d40e63501086 - https://github.com
jwr-ppcp - https://github.com/pdfminer/pdfminer.six/commit/b808ee05dd7f0c8ea8ec34bdf394d40e63501086 - https://github.com/pdfminer/pdfminer.six/releases/tag/20251107
CVE ID: CVE-2025-64513 State: PUBLISHED Published: 2025-11-10T22:05:14.744Z Last Updated: 2025-11-12T20:13:31.847Z Vendors: milvus-io Products: milvus Problem Types: CWE-287 Description: Milvus is an open-source vector database built for generative AI applications. An unauthenticated attacker can exploit a vulnerability in versions prior to 2.4.24, 2.5.21, and 2.6.5 to bypass all authentication mechanisms in the Milvus Proxy component, gaining full administrative access to the Milvus cluster. This grants the attacker the ability to read, modify, or delete data, and to perform privileged administrative operations such as database or collection management. This issue has been fixed in Milvus 2
rm privileged administrative operations such as database or collection management. This issue has been fixed in Milvus 2.4.24, 2.5.21, and 2.6.5. If immediate upgrade is not possible, a temporary mitigation can be applied by removing the sourceID header from all incoming requests at the gateway, API gateway, or load balancer level before they reach the Milvus Proxy. This prevents attackers from exploiting the authentication bypass behavior. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/milvus-io/milvus/security/advisories/GHSA-mhjq-8c7m-3f7p - https://github.com/milvus-io/milvus/pull/45379 - https://github.com/milvus-io/milvus/pull/45383 - https://github
-3f7p - https://github.com/milvus-io/milvus/pull/45379 - https://github.com/milvus-io/milvus/pull/45383 - https://github.com/milvus-io/milvus/pull/45391