Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
and have a symlink in the public directory are affected. Versions 7.1.5, 7.0.7, 6.3.6, and 5.4.20 fix the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/vitejs/vite/security/advisories/GHSA-g4jq-h2w9-997c - https://github.com/lukeed/sirv/commit/f0113f3f8266328d804ee808f763a3c11f8997eb - https://github.com/vitejs/vite/commit/09f2b52e8d5907f26602653caf41b3a56692600d - https://github.com/vitejs/vite/commit/4f1c35bcbb5830290c694aa14b6789e07450f069 - https://github.com/vitejs/vite/commit/63e2a5d232218f3f8d852056751e609a5367aaec - https://github.com/vitejs/vite/commit/e11d24008b97d4ca731ecc1a3b95260a6d12e7e0
CVE ID: CVE-2025-58752 State: PUBLISHED Published: 2025-09-08T22:56:58.039Z Last Updated: 2025-09-09T13:29:30.868Z Vendors: vitejs Products: vite Problem Types: CWE-23, CWE-200, CWE-284 Description: Vite is a frontend tooling framework for JavaScript. Prior to versions 7.1.5, 7.0.7, 6.3.6, and 5.4.20, any HTML files on the machine were served regardless of the `server.fs` settings. Only apps that explicitly expose the Vite dev server to the network (using --host or server.host config option) and use `appType: 'spa'` (default) or `appType: 'mpa'` are affected. This vulnerability also affects the preview server. The preview server allowed HTML files not under the output directory to be served.
lity also affects the preview server. The preview server allowed HTML files not under the output directory to be served. Versions 7.1.5, 7.0.7, 6.3.6, and 5.4.20 fix the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/vitejs/vite/security/advisories/GHSA-jqfw-vq24-v9c3 - https://github.com/vitejs/vite/commit/0ab19ea9fcb66f544328f442cf6e70f7c0528d5f - https://github.com/vitejs/vite/commit/14015d794f69accba68798bd0e15135bc51c9c1e - https://github.com/vitejs/vite/commit/482000f57f56fe6ff2e905305100cfe03043ddea - https://github.com/vitejs/vite/commit/6f01ff4fe072bcfcd4e2a84811772b818cd51fe6
CVE ID: CVE-2025-58753 State: PUBLISHED Published: 2025-09-09T19:54:36.056Z Last Updated: 2025-09-10T20:17:30.500Z Vendors: 9001 Products: copyparty Problem Types: CWE-862, CWE-552 Description: Copyparty is a portable file server. In versions prior to 1.19.8, there was a missing permission-check in the shares feature (the `shr` global-option). When a share was created for just one file inside a folder, it was possible to access the other files inside that folder by guessing the filenames. It was not possible to descend into subdirectories in this manner; only the sibling files were accessible. This issue did not affect filekeys or dirkeys. Version 1.19.8 fixes the issue. Additional Analyst N
les were accessible. This issue did not affect filekeys or dirkeys. Version 1.19.8 fixes the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/9001/copyparty/security/advisories/GHSA-pxvw-4w88-6x95 - https://github.com/9001/copyparty/commit/e0a92ba72d46074209a9c304eb2a01ca0429e60c - https://github.com/9001/copyparty/releases/tag/v1.19.8
CVE ID: CVE-2025-58754 State: PUBLISHED Published: 2025-09-12T01:16:40.513Z Last Updated: 2025-09-29T14:26:30.869Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: axios Products: axios Problem Types: CWE-770 Description: Axios is a promise based HTTP client for the browser and Node.js. When Axios prior to versions 0.30.2 and 1.12.0 runs on Node.js and is given a URL with the `data:` scheme, it does not perform HTTP. Instead, its Node http adapter decodes the entire payload into memory (`Buffer`/`Blob`) and returns a synthetic 200 response. This path ignores `maxContentLength` / `maxBodyLength` (which only protect HTTP responses), so an attacker can supply a ve
is path ignores `maxContentLength` / `maxBodyLength` (which only protect HTTP responses), so an attacker can supply a very large `data:` URI and cause the process to allocate unbounded memory and crash (DoS), even if the caller requested `responseType: 'stream'`. Versions 0.30.2 and 1.12.0 contain a patch for the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/axios/axios/security/advisories/GHSA-4hjh-wcwx-xvwj - https://github.com/axios/axios/pull/7011 - https://github.com/axios/axios/pull/7034 - https://github.com/axios/axios/commit/945435fc51467303768202250debb8d4ae892593 - https://github.com/axios/axios/commit/a1b1d3f073a988601583a604f5f9f5d05a3
mit/945435fc51467303768202250debb8d4ae892593 - https://github.com/axios/axios/commit/a1b1d3f073a988601583a604f5f9f5d05a3d0b67 - https://github.com/axios/axios/releases/tag/v0.30.2 - https://github.com/axios/axios/releases/tag/v1.12.0
CVE ID: CVE-2025-58755 State: PUBLISHED Published: 2025-09-08T23:35:41.506Z Last Updated: 2025-09-09T13:29:04.890Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Project-MONAI Products: MONAI Problem Types: CWE-22 Description: MONAI (Medical Open Network for AI) is an AI toolkit for health care imaging. The extractall function `zip_file.extractall(output_dir)` is used directly to process compressed files. It is used in many places in the project. In versions up to and including 1.5.0, when the Zip file containing malicious content is decompressed, it overwrites the system files. In addition, the project allows the download of the zip content through the link,
essed, it overwrites the system files. In addition, the project allows the download of the zip content through the link, which increases the scope of exploitation of this vulnerability. As of time of publication, no known fixed versions are available. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Project-MONAI/MONAI/security/advisories/GHSA-x6ww-pf9m-m73m
CVE ID: CVE-2025-58756 State: PUBLISHED Published: 2025-09-08T23:39:55.508Z Last Updated: 2025-09-09T13:28:57.518Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Project-MONAI Products: MONAI Problem Types: CWE-502 Description: MONAI (Medical Open Network for AI) is an AI toolkit for health care imaging. In versions up to and including 1.5.0, in `model_dict = torch.load(full_path, map_location=torch.device(device), weights_only=True)` in monai/bundle/scripts.py , `weights_only=True` is loaded securely. However, insecure loading methods still exist elsewhere in the project, such as when loading checkpoints. This is a common practice when users want to reduce t
exist elsewhere in the project, such as when loading checkpoints. This is a common practice when users want to reduce training time and costs by loading pre-trained models downloaded from other platforms. Loading a checkpoint containing malicious content can trigger a deserialization vulnerability, leading to code execution. As of time of publication, no known fixed versions are available. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Project-MONAI/MONAI/security/advisories/GHSA-6vm5-6jv9-rjpj
CVE ID: CVE-2025-58757 State: PUBLISHED Published: 2025-09-08T23:42:11.009Z Last Updated: 2025-09-09T13:28:51.574Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Project-MONAI Products: MONAI Problem Types: CWE-502 Description: MONAI (Medical Open Network for AI) is an AI toolkit for health care imaging. In versions up to and including 1.5.0, the `pickle_operations` function in `monai/data/utils.py` automatically handles dictionary key-value pairs ending with a specific suffix and deserializes them using `pickle.loads()` . This function also lacks any security measures. The deserialization may lead to code execution. As of time of publication, no known fixed
lacks any security measures. The deserialization may lead to code execution. As of time of publication, no known fixed versions are available. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Project-MONAI/MONAI/security/advisories/GHSA-p8cm-mm2v-gwjm
CVE ID: CVE-2025-58758 State: PUBLISHED Published: 2025-09-09T19:50:18.518Z Last Updated: 2025-09-10T20:14:26.393Z Severity: MEDIUM (CVSS 5.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: datahihi1 Products: tiny-env Problem Types: CWE-703 Description: TinyEnv is an environment variable loader for PHP applications. In versions 1.0.1, 1.0.2, 1.0.9, and 1.0.10, TinyEnv did not require the `.env` file to exist when loading environment variables. This could lead to unexpected behavior where the application silently ignores missing configuration, potentially causing insecure defaults or deployment misconfigurations. The issue has been fixed in version 1.0.11. All users should upgrade to
ecure defaults or deployment misconfigurations. The issue has been fixed in version 1.0.11. All users should upgrade to 1.0.11 or later. As a workaround, users can manually verify the existence of the `.env` file before initializing TinyEnv. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/datahihi1/tiny-env/security/advisories/GHSA-3j7m-5g4q-gfpc - https://github.com/datahihi1/tiny-env/commit/69b7b885e6cfbf07f470fb3512360e0caa95521e
CVE ID: CVE-2025-58759 State: PUBLISHED Published: 2025-09-09T19:52:39.014Z Last Updated: 2025-09-10T20:15:16.418Z Severity: MEDIUM (CVSS 5.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: datahihi1 Products: tiny-env Problem Types: CWE-20 Description: TinyEnv is an environment variable loader for PHP applications. In versions 1.0.9 and 1.0.10, TinyEnv did not properly strip inline comments inside .env values. This could lead to unexpected behavior or misconfiguration, where variables contain unintended characters (including # or comment text). Applications depending on strict environment values may expose logic errors, insecure defaults, or failed authentication. The issue is fixed
g on strict environment values may expose logic errors, insecure defaults, or failed authentication. The issue is fixed in v1.0.11. Users should upgrade to the latest patched version. As a temporary workaround, avoid using inline comments in .env files, or sanitize loaded values manually. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/datahihi1/tiny-env/security/advisories/GHSA-72cm-7236-h43r
CVE ID: CVE-2025-58760 State: PUBLISHED Published: 2025-09-09T19:56:57.962Z Last Updated: 2025-09-10T20:18:02.075Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N) Vendors: Tautulli Products: Tautulli Problem Types: CWE-23 Description: Tautulli is a Python based monitoring and tracking tool for Plex Media Server. The `/image` API endpoint in Tautulli v2.15.3 and earlier is vulnerable to path traversal, allowing unauthenticated attackers to read arbitrary files from the application server's filesystem. In Tautulli, the `/image` API endpoint is used to serve static images from the application's data directory to users. This endpoint can be accessed without authentication,
erve static images from the application's data directory to users. This endpoint can be accessed without authentication, and its intended purpose is for server background images and icons within the user interface. Attackers can exfiltrate files from the application file system, including the `tautulli.db` SQLite database containing active JWT tokens, as well as the `config.ini` file which contains the hashed admin password, the JWT token secret, and the Plex Media Server token and connection details. If the password is cracked, or if a valid JWT token is present in the database, an unauthenticated attacker can escalate their privileges to obtain administrative control over the application.
abase, an unauthenticated attacker can escalate their privileges to obtain administrative control over the application. Version 2.16.0 contains a fix for the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Tautulli/Tautulli/security/advisories/GHSA-8g4r-8f3f-hghp - https://github.com/Tautulli/Tautulli/commit/47566128e2e5dde98980d59b7a51b98173bc0b40
CVE ID: CVE-2025-58761 State: PUBLISHED Published: 2025-09-09T19:59:17.329Z Last Updated: 2025-09-10T13:47:59.287Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N) Vendors: Tautulli Products: Tautulli Problem Types: CWE-27 Description: Tautulli is a Python based monitoring and tracking tool for Plex Media Server. The `real_pms_image_proxy` endpoint in Tautulli v2.15.3 and prior is vulnerable to path traversal, allowing unauthenticated attackers to read arbitrary files from the application server's filesystem. The `real_pms_image_proxy` is used to fetch an image directly from the backing Plex Media Server. The image to be fetched is specified through an `img` URL paramet
an image directly from the backing Plex Media Server. The image to be fetched is specified through an `img` URL parameter, which can either be a URL or a file path. There is some validation ensuring that `img` begins with the prefix `interfaces/default/images` in order to be served from the local filesystem. However this can be bypassed by passing an `img` parameter which begins with a valid prefix, and then adjoining path traversal characters in order to reach files outside of intended directories. An attacker can exfiltrate files on the application file system, including the `tautulli.db` SQLite database containing active JWT tokens, as well as the `config.ini` file which contains the has
the `tautulli.db` SQLite database containing active JWT tokens, as well as the `config.ini` file which contains the hashed admin password, the JWT token secret, and the Plex Media Server token and connection details. If the password is cracked, or if a valid JWT token is present in the database, an unauthenticated attacker can escalate their privileges to obtain administrative control over the application. Version 2.16.0 contains a fix for the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Tautulli/Tautulli/security/advisories/GHSA-r732-m675-wj7w - https://github.com/Tautulli/Tautulli/commit/ec77a70aafc555e1aad0d9981f719d1200c117f1
CVE ID: CVE-2025-58762 State: PUBLISHED Published: 2025-09-09T20:08:27.965Z Last Updated: 2025-09-10T20:20:35.507Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Tautulli Products: Tautulli Problem Types: CWE-73 Description: Tautulli is a Python based monitoring and tracking tool for Plex Media Server. In Tautulli v2.15.3 and earlier, an attacker with administrative access can use the `pms_image_proxy` endpoint to write arbitrary python scripts into the application filesystem. This leads to remote code execution when combined with the `Script` notification agent. If an attacker with administrative access changes the URL of the PMS to a server they control
cript` notification agent. If an attacker with administrative access changes the URL of the PMS to a server they control, they can then abuse the `pms_image_proxy` to obtain a file write into the application filesystem. This can be done by making a `pms_image_proxy` request with a URL in the `img` parameter and the desired file name in the `img_format` parameter. Tautulli then uses a hash of the desired metadata together with the `img_format` in order to construct a file path. Since the attacker controls `img_format` which occupies the end of the file path, and `img_format` is not sanitised, the attacker can then use path traversal characters to specify filename of their choosing. If the spe
is not sanitised, the attacker can then use path traversal characters to specify filename of their choosing. If the specified file does not exist, Tautaulli will then attempt to fetch the image from the configured PMS. Since the attacker controls the PMS, they can return arbitrary content in response to this request, which will then be written into the specified file. An attacker can write an arbitrary python script into a location on the application file system. The attacker can then make use of the built-in `Script` notification agent to run the local script, obtaining remote code execution on the application server. Users should upgrade to version 2.16.0 to receive a patch. Additional An
emote code execution on the application server. Users should upgrade to version 2.16.0 to receive a patch. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Tautulli/Tautulli/security/advisories/GHSA-pxhr-29gv-4j8v - https://github.com/Tautulli/Tautulli/commit/26e6b328112eb2cf35c164f981e0718f3a3d31a7
CVE ID: CVE-2025-58763 State: PUBLISHED Published: 2025-09-09T20:13:44.797Z Last Updated: 2025-09-10T13:32:35.831Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Tautulli Products: Tautulli Problem Types: CWE-78 Description: Tautulli is a Python based monitoring and tracking tool for Plex Media Server. A command injection vulnerability in Tautulli v2.15.3 and prior allows attackers with administrative privileges to obtain remote code execution on the application server. This vulnerability requires the application to have been cloned from GitHub and installed manually. When Tautulli is cloned directly from GitHub and installed manually, the application manages
Hub and installed manually. When Tautulli is cloned directly from GitHub and installed manually, the application manages updates and versioning through calls to the `git` command. In the code, this is performed through the `runGit` function in `versioncheck.py`. Since `shell=True` is passed to `subproces.Popen`, this call is vulnerable to subject to command injection, as shell characters within arguments will be passed to the underlying shell. A concrete location where this can be triggered is in the `checkout_git_branch` endpoint. This endpoint stores a user-supplied remote and branch name into the `GIT_REMOTE` and `GIT_BRANCH` configuration keys without sanitization. Downstream, these keys
e and branch name into the `GIT_REMOTE` and `GIT_BRANCH` configuration keys without sanitization. Downstream, these keys are then fetched and passed directly into `runGit` using a format string. Hence, code execution can be obtained by using `$()` interpolation in a command. Version 2.16.0 contains a fix for the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Tautulli/Tautulli/security/advisories/GHSA-jrm9-r57q-6cvf
CVE ID: CVE-2025-58764 State: PUBLISHED Published: 2025-09-10T15:06:30.163Z Last Updated: 2025-09-11T14:43:27.411Z Vendors: anthropics Products: claude-code Problem Types: CWE-94 Description: Claude Code is an agentic coding tool. Due to an error in command parsing, versions prior to 1.0.105 were vulnerable to a bypass of the Claude Code confirmation prompt to trigger execution of an untrusted command. Reliably exploiting this requires the ability to add untrusted content into a Claude Code context window. Users on standard Claude Code auto-update will have received this fix automatically. Users performing manual updates are advised to update to version 1.0.105 or the latest version. Additio
x automatically. Users performing manual updates are advised to update to version 1.0.105 or the latest version. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/anthropics/claude-code/security/advisories/GHSA-qxfv-fcpc-w36x
CVE ID: CVE-2025-58765 State: PUBLISHED Published: 2025-09-09T20:16:26.657Z Last Updated: 2025-09-10T13:22:05.307Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: webrecorder Products: wabac.js Problem Types: CWE-79 Description: wabac.js provides a full web archive replay system, or 'wayback machine', using Service Workers. A Reflected Cross-Site Scripting (XSS) vulnerability exists in the 404 error handling logic of wabac.js v2.23.10 and below. The parameter `requestURL` (derived from the original request target) is directly embedded into an inline `<script>` block without sanitization or escaping. This allows an attacker to craft a malicious URL that execute
inline `<script>` block without sanitization or escaping. This allows an attacker to craft a malicious URL that executes arbitrary JavaScript in the victim’s browser. The scope may be limited by CORS policies, depending on the situation in which wabac.js is used. The vulnerability is fixed in wabac.js v2.23.11. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/webrecorder/wabac.js/security/advisories/GHSA-w765-jm6w-4hhj - https://github.com/webrecorder/wabac.js/commit/25feb4a5af69a6b65694426eae67b890be438c4c - https://github.com/webrecorder/wabac.js/releases/tag/v2.23.11
CVE ID: CVE-2025-58766 State: PUBLISHED Published: 2025-09-17T17:36:22.811Z Last Updated: 2025-09-17T17:51:53.392Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: dyad-sh Products: dyad Problem Types: CWE-94 Description: Dyad is a local AI app builder. A critical security vulnerability has been discovered that affected Dyad v0.19.0 and earlier versions that allows attackers to execute arbitrary code on users' systems. The vulnerability affects the application's preview window functionality and can bypass Docker container protections. An attacker can craft web content that automatically executes when the preview loads. The malicious content can break out of
ttacker can craft web content that automatically executes when the preview loads. The malicious content can break out of the application's security boundaries and gain control of the system. This has been fixed in Dyad v0.20.0 and later. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/dyad-sh/dyad/security/advisories/GHSA-7fxm-c5xx-7vpq - https://github.com/dyad-sh/dyad/commit/1c0255ab126d3b38ae9e78b17cdab9a07e5f0185 - https://github.com/dyad-sh/dyad/commit/ebcf89ee6cead83a33add5ef1e19c8d4f9b4ce9b
CVE ID: CVE-2025-58767 State: PUBLISHED Published: 2025-09-17T17:45:58.118Z Last Updated: 2025-09-17T17:54:00.334Z Vendors: ruby Products: rexml Problem Types: CWE-400 Description: REXML is an XML toolkit for Ruby. The REXML gems from 3.3.3 to 3.4.1 has a DoS vulnerability when parsing XML containing multiple XML declarations. If you need to parse untrusted XMLs, you may be impacted to these vulnerabilities. The REXML gem 3.4.2 or later include the patches to fix these vulnerabilities. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/ruby/rexml/security/advisories/GHSA-c2f4-jgmc-q2r5 - https://github.com/ruby/rexml/commit/5859bdeac792687eaf93d8e8f0b7e3c1e2e
rexml/security/advisories/GHSA-c2f4-jgmc-q2r5 - https://github.com/ruby/rexml/commit/5859bdeac792687eaf93d8e8f0b7e3c1e2ed5c23
CVE ID: CVE-2025-58768 State: PUBLISHED Published: 2025-09-09T20:19:52.122Z Last Updated: 2025-09-09T20:31:54.042Z Severity: CRITICAL (CVSS 9.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: ThinkInAIXYZ Products: deepchat Problem Types: CWE-94 Description: DeepChat is a smart assistant uses artificial intelligence. Prior to version 0.3.5, in the Mermaid chart rendering component, there is a risky operation of directly using `innerHTML` to set user content. Therefore, any malicious content rendered via Mermaid will directly trigger the exploit chain, leading to command execution. This vulnerability is primarily caused by a failure to fully address the existing XSS issue in the projec
and execution. This vulnerability is primarily caused by a failure to fully address the existing XSS issue in the project, leading to another exploit chain. The exploit chain is consistent with the report GHSA-hqr4-4gfc-5p2j, executing arbitrary JavaScript code via XSS and arbitrary commands via exposed IPC. Version 0.3.5 contains an updated fix. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/ThinkInAIXYZ/deepchat/security/advisories/GHSA-f7q5-vc93-wp6j