Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ese packages before they were deprecated. The packages and versions `@duckdb/node-api@1.3.3`, `@duckdb/node-bindings@1.3.3`, `duckdb@1.3.3`, and `@duckdb/duckdb-wasm@1.29.2` were affected. DuckDB immediately deprecated the specific versions, engaged npm support to delete the affected verions, and re-released the node packages with higher version numbers (1.3.4/1.30.0). Users may upgrade to versions 1.3.4, 1.30.0, or a higher version to protect themselves. As a workaround, they may also downgrade to 1.3.2 or 1.29.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/duckdb/duckdb-node/security/advisories/GHSA-w62p-hx95-gf2c - https://github.com/duckdb/duckdb-n
es: - https://github.com/duckdb/duckdb-node/security/advisories/GHSA-w62p-hx95-gf2c - https://github.com/duckdb/duckdb-node/releases/tag/v1.3.4 - https://www.aikido.dev/blog/npm-debug-and-chalk-packages-compromised
CVE ID: CVE-2025-59038 State: PUBLISHED Published: 2025-09-09T22:17:08.493Z Last Updated: 2025-09-10T18:02:00.169Z Vendors: prebid Products: Prebid.js Problem Types: CWE-506 Description: Prebid.js is a free and open source library for publishers to quickly implement header bidding. NPM users of prebid 10.9.2 may have been briefly compromised by a malware campaign. The malicious code attempts to redirect crypto transactions on the site to the attackers' wallet. Version 10.10.0 fixes the issue. As a workaround, it is also possible to downgrade to 10.9.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/prebid/Prebid.js/security/advisories/GHSA-jwq7-6j4r-2f92
tes: - CISA ADP Vulnrichment: References: - https://github.com/prebid/Prebid.js/security/advisories/GHSA-jwq7-6j4r-2f92 - https://www.sonatype.com/blog/npm-chalk-and-debug-packages-hit-in-software-supply-chain-attack
CVE ID: CVE-2025-59039 State: PUBLISHED Published: 2025-09-09T22:23:55.551Z Last Updated: 2025-09-10T18:00:27.573Z Vendors: prebid Products: prebid-universal-creative Problem Types: CWE-506 Description: Prebid Universal Creative (PUC) is a JavaScript API to render multiple formats. Npm users of PUC 1.17.3 or PUC latest were briefly affected by crypto-related malware. This includes the extremely popular jsdelivr hosting of this file. The maintainers of PUC unpublished version 1.17.3. Users should see Prebid.js 9 release notes for suggestions on moving off the deprecated workflow of using the PUC or pointing to a dynamic version of it. PUC users pointing to latest should transition to 1.17.2 a
flow of using the PUC or pointing to a dynamic version of it. PUC users pointing to latest should transition to 1.17.2 as soon as possible to avoid similar attacks in the future. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/prebid/prebid-universal-creative/security/advisories/GHSA-m662-56rj-8fmm - https://www.sonatype.com/blog/npm-chalk-and-debug-packages-hit-in-software-supply-chain-attack
CVE ID: CVE-2025-59040 State: PUBLISHED Published: 2025-09-18T14:28:41.999Z Last Updated: 2025-09-22T17:21:55.603Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Enalean Products: tuleap Problem Types: CWE-280 Description: Tuleap is an Open Source Suite to improve management of software developments and collaboration. Backlog item representations do not verify the permissions of the child trackers. Users might see tracker names they should not have access to. This vulnerability is fixed in Tuleap Community Edition 16.11.99.1757427600 and Tuleap Enterprise Edition 16.11-6 and 16.10-8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://g
uleap Enterprise Edition 16.11-6 and 16.10-8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Enalean/tuleap/security/advisories/GHSA-67xc-39v9-pffg - https://github.com/Enalean/tuleap/commit/92e4aa2d830a624a9183206c1c3558b90b8a5525 - https://tuleap.net/plugins/git/tuleap/tuleap/stable?a=commit&h=92e4aa2d830a624a9183206c1c3558b90b8a5525 - https://tuleap.net/plugins/tracker/?aid=44489
CVE ID: CVE-2025-59041 State: PUBLISHED Published: 2025-09-10T15:07:50.396Z Last Updated: 2025-10-15T16:00:49.872Z Vendors: anthropics Products: claude-code Problem Types: CWE-94 Description: Claude Code is an agentic coding tool. At startup, Claude Code executed a command templated in with `git config user.email`. Prior to version 1.0.105, a maliciously configured user email in git could be used to trigger arbitrary code execution before a user accepted the workspace trust dialog. Users on standard Claude Code auto-update will have received this fix automatically. Users performing manual updates are advised to update to version 1.0.105 or the latest version. Additional Analyst Notes: - CISA
rforming manual updates are advised to update to version 1.0.105 or the latest version. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/anthropics/claude-code/security/advisories/GHSA-j4h9-wv2m-wrf7
CVE ID: CVE-2025-59042 State: PUBLISHED Published: 2025-09-09T22:28:20.394Z Last Updated: 2025-09-10T17:24:35.133Z Vendors: pyinstaller Products: pyinstaller Problem Types: CWE-94 Description: PyInstaller bundles a Python application and all its dependencies into a single package. Due to a special entry being appended to `sys.path` during the bootstrap process of a PyInstaller-frozen application, and due to the bootstrap script attempting to load an optional module for bytecode decryption while this entry is still present in `sys.path`, an application built with PyInstaller < 6.0.0 may be tricked by an unprivileged attacker into executing arbitrary python code when **all** of the following c
< 6.0.0 may be tricked by an unprivileged attacker into executing arbitrary python code when **all** of the following conditions are met. First, the application is built with PyInstaller < 6.0.0; both onedir and onefile mode are affected. Second, the optional bytecode encryption code feature was not enabled during the application build. Third, the attacker can create files/directories in the same directory where the executable is located. Fourth, the filesystem supports creation of files/directories that contain `?` in their name (i.e., non-Windows systems). Fifth, the attacker is able to determine the offset at which the PYZ archive is embedded in the executable. The attacker can create a
acker is able to determine the offset at which the PYZ archive is embedded in the executable. The attacker can create a directory (or a zip archive) next to the executable, with the name that matches the format used by PyInstaller's bootloader to transmit information about the location of PYZ archive to the bootstrap script. If this directory (or zip archive) contains a python module whose name matches the name used by the optional bytecode encryption feature, this module will be loaded and executed by the bootstrap script (in the absence of the real, built-in module that is available when the bytecode-encryption feature is enabled). This results in arbitrary code execution that requires no
s available when the bytecode-encryption feature is enabled). This results in arbitrary code execution that requires no modification of the executable itself. If the executable is running with elevated privileges (for example, due to having the `setuid` bit set), the code in the injected module is also executed with the said elevated privileges, resulting in a local privilege escalation. PyInstaller 6.0.0 (f5adf291c8b832d5aff7632844f7e3ddf7ad4923) removed support for bytecode encryption; this effectively removes the described attack vector, due to the bootstrap script not attempting to load the optional module for bytecode-decryption anymore. PyInstaller 6.10.0 (cfd60b510f95f92cb81fc42735c39
ttempting to load the optional module for bytecode-decryption anymore. PyInstaller 6.10.0 (cfd60b510f95f92cb81fc42735c399bb781a4739) reworked the bootstrap process to avoid (ab)using `sys.path` for transmitting location of the PYZ archive, which further eliminates the possibility of described injection procedure. If upgrading PyInstaller is not feasible, this issue can be worked around by ensuring proper permissions on directories containing security-sensitive executables (i.e., executables with `setuid` bit set) should mitigate the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/pyinstaller/pyinstaller/security/advisories/GHSA-p2xp-xx3r-mffc - http
DP Vulnrichment: References: - https://github.com/pyinstaller/pyinstaller/security/advisories/GHSA-p2xp-xx3r-mffc - https://github.com/pyinstaller/pyinstaller/commit/f5adf291c8b832d5aff7632844f7e3ddf7ad4923
CVE ID: CVE-2025-59043 State: PUBLISHED Published: 2025-10-17T16:03:23.584Z Last Updated: 2025-10-17T17:22:52.795Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: openbao Products: openbao Problem Types: CWE-400 Description: OpenBao is an open source identity-based secrets management system. In OpenBao versions prior to 2.4.1, JSON objects after decoding may use significantly more memory than their serialized version. It is possible to craft a JSON payload to maximize the factor between serialized memory usage and deserialized memory usage, similar to a zip bomb, with factors reaching approximately 35. This can be used to circumvent the max_request_size config
imilar to a zip bomb, with factors reaching approximately 35. This can be used to circumvent the max_request_size configuration parameter which is intended to protect against denial of service attacks. The request body is parsed into a map very early in the request handling chain before authentication, which means an unauthenticated attacker can send a specifically crafted JSON object and cause an out-of-memory crash. Additionally, for requests with large numbers of strings, the audit subsystem can consume large quantities of CPU. The vulnerability is fixed in version 2.4.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/openbao/openbao/security/advisorie
. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/openbao/openbao/security/advisories/GHSA-g46h-2rq9-gw5m - https://github.com/openbao/openbao/pull/1756 - https://github.com/openbao/openbao/commit/d418f238bc99adc72c73109faf574cc2b672880c - https://github.com/openbao/openbao/blob/788536bd3e10818a7b4fb00aac6affc23388e5a9/http/logical.go#L50
CVE ID: CVE-2025-59044 State: PUBLISHED Published: 2025-09-09T22:31:39.480Z Last Updated: 2025-09-10T16:06:02.089Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: himmelblau-idm Products: himmelblau Problem Types: CWE-1188 Description: Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune. Himmelblau 0.9.x derives numeric GIDs for Entra ID groups from the group display name when himmelblau.conf `id_attr_map = name` (the default configuration). Because Microsoft Entra ID allows multiple groups with the same `displayName` (including end-user–created personal/O365 groups, depending on tenant policy), distinct directory groups can colla
Name` (including end-user–created personal/O365 groups, depending on tenant policy), distinct directory groups can collapse to the same numeric GID on Linux. This issue only applies to Himmelblau versions 0.9.0 through 0.9.22. Any resource or service on a Himmelblau-joined host that enforces authorization by numeric GID (files/dirs, etc.) can be unintentionally accessible to a user who creates or joins a different Entra/O365 group that happens to share the same `displayName` as a privileged security group. Users should upgrade to 0.9.23, or 1.0.0 or later, to receive a patch. Group to GID mapping now uses Entra ID object IDs (GUIDs) and does not collide on same-name groups. As a workaround,
h. Group to GID mapping now uses Entra ID object IDs (GUIDs) and does not collide on same-name groups. As a workaround, use tenant policy hardening to restrict arbitrary group creation until all hosts are patched. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/himmelblau-idm/himmelblau/security/advisories/GHSA-2m43-mmg9-3rgc - https://github.com/himmelblau-idm/himmelblau/security/advisories/GHSA-gcxr-m95v-qcf7 - https://github.com/himmelblau-idm/himmelblau/commit/76c5b41df7f89378af65dc7c0d0484d7d41b3281
CVE ID: CVE-2025-59045 State: PUBLISHED Published: 2025-09-10T16:09:49.485Z Last Updated: 2025-09-11T13:28:45.110Z Vendors: stalwartlabs Products: stalwart Problem Types: CWE-770 Description: Stalwart is a mail and collaboration server. Starting in version 0.12.0 and prior to version 0.13.3, a memory exhaustion vulnerability exists in Stalwart's CalDAV implementation that allows authenticated attackers to cause denial-of-service by triggering unbounded memory consumption through recurring event expansion. An authenticated attacker can crash the Stalwart server by creating recurring events with large payloads and triggering their expansion through CalDAV REPORT requests. A single malicious re
ecurring events with large payloads and triggering their expansion through CalDAV REPORT requests. A single malicious request expanding 300 events with 1000-character descriptions can consume up to 2 GB of memory. The vulnerability exists in the `ArchivedCalendarEventData.expand` function, which processes CalDAV `REPORT` requests with event expansion. When a client requests recurring events in their expanded form using the `<C:expand>` element, the server stores all expanded event instances in memory without enforcing size limits. Users should upgrade to Stalwart version 0.13.3 or later to receive a fix. If immediate upgrading is not possible, implement memory limits at the container/system
13.3 or later to receive a fix. If immediate upgrading is not possible, implement memory limits at the container/system level; monitor server memory usage for unusual spikes; consider rate limiting CalDAV REPORT requests; and restrict CalDAV access to trusted users only. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/stalwartlabs/stalwart/security/advisories/GHSA-xv4r-q6gr-6pfg - https://github.com/stalwartlabs/stalwart/commit/15762fba2ba335e560b8d25f71af085a8b6b6cf2 - https://github.com/stalwartlabs/stalwart/blob/main/CHANGELOG.md - https://github.com/stalwartlabs/stalwart/releases/tag/v0.13.3 - https://tools.ietf.org/html/rfc4791
CVE ID: CVE-2025-59046 State: PUBLISHED Published: 2025-09-09T22:33:31.580Z Last Updated: 2025-09-10T13:07:49.199Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: ninofiliu Products: interactive-git-checkout Problem Types: CWE-77 Description: The npm package `interactive-git-checkout` is an interactive command-line tool that allows users to checkout a git branch while it prompts for the branch name on the command-line. It is available as an npm package and can be installed via `npm install -g interactive-git-checkout`. Versions up to and including 1.1.4 of the `interactive-git-checkout` tool are vulnerable to a command injection vulnerability because the s
including 1.1.4 of the `interactive-git-checkout` tool are vulnerable to a command injection vulnerability because the software passes the branch name to the `git checkout` command using the Node.js child process module's `exec()` function without proper input validation or sanitization. Commit 8dd832dd302af287a61611f4f85e157cd1c6bb41 fixes the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/ninofiliu/interactive-git-checkout/security/advisories/GHSA-4wcm-7hjf-6xw5 - https://github.com/ninofiliu/interactive-git-checkout/commit/8dd832dd302af287a61611f4f85e157cd1c6bb41
CVE ID: CVE-2025-59047 State: PUBLISHED Published: 2025-09-11T18:03:50.361Z Last Updated: 2025-09-11T18:22:28.636Z Vendors: matrix-org Products: matrix-rust-sdk Problem Types: CWE-682 Description: matrix-sdk-base is the base component to build a Matrix client library. In matrix-sdk-base before 0.14.1, calling the `RoomMember::normalized_power_level()` method can cause a panic if a room member has a power level of `Int::Min`. The issue is fixed in matrix-sdk-base 0.14.1. The affected method isn’t used internally, so avoiding calling `RoomMember::normalized_power_level()` prevents the panic. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/matrix-org/matrix-r
vents the panic. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/matrix-org/matrix-rust-sdk/security/advisories/GHSA-qhj8-q5r6-8q6j - https://github.com/matrix-org/matrix-rust-sdk/pull/5635 - https://github.com/matrix-org/matrix-rust-sdk/commit/ce3b67f801446387972ff120e907ca828a9f1207 - https://github.com/matrix-org/matrix-rust-sdk/releases/tag/matrix-sdk-base-0.14.1
CVE ID: CVE-2025-59048 State: PUBLISHED Published: 2025-10-23T15:09:06.574Z Last Updated: 2025-10-23T15:40:48.665Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) Vendors: openbao Products: openbao-plugins Problem Types: CWE-863, CWE-694 Description: OpenBao's AWS Plugin generates AWS access credentials based on IAM policies. Prior to version 0.1.1, the AWS Plugin is vulnerable to cross-account IAM role Impersonation in the AWS auth method. The vulnerability allows an IAM role from an untrusted AWS account to authenticate by impersonating a role with the same name in a trusted account, leading to unauthorized access. This impacts all users of the auth-aws plugin who op
the same name in a trusted account, leading to unauthorized access. This impacts all users of the auth-aws plugin who operate in a multi-account AWS environment where IAM role names may not be unique across accounts. This vulnerability has been patched in version 0.1.1 of the auth-aws plugin. A workaround for this issue involves guaranteeing that IAM role names are unique across all AWS accounts that could potentially interact with your OpenBao environment, and to audit for any duplicate IAM roles. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/openbao/openbao-plugins/security/advisories/GHSA-jp7h-4f3c-9rc7 - https://github.com/openbao/openbao-plugins/com
hub.com/openbao/openbao-plugins/security/advisories/GHSA-jp7h-4f3c-9rc7 - https://github.com/openbao/openbao-plugins/commit/2a77af36834746ca6d3ac9bd1049154c84b3efae
CVE ID: CVE-2025-59049 State: PUBLISHED Published: 2025-09-10T18:49:06.060Z Last Updated: 2025-09-10T19:19:20.964Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: mockoon Products: mockoon Problem Types: CWE-73, CWE-22, CWE-24 Description: Mockoon provides way to design and run mock APIs. Prior to version 9.2.0, a mock API configuration for static file serving follows the same approach presented in the documentation page, where the server filename is generated via templating features from user input is vulnerable to Path Traversal and LFI, allowing an attacker to get any file in the mock server filesystem. The issue may be particularly relevant in cloud hosted
lowing an attacker to get any file in the mock server filesystem. The issue may be particularly relevant in cloud hosted server instances. Version 9.2.0 fixes the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/mockoon/mockoon/security/advisories/GHSA-w7f9-wqc4-3wxr - https://github.com/mockoon/mockoon/commit/c7f6e23e87dc3b8cc44e5802af046200a797bd2e - https://github.com/mockoon/mockoon/blob/1ed31c4059d7f757f6cb2a43e10dc81b0d9c55a9/packages/commons-server/src/libs/server/server.ts#L1400 - https://github.com/mockoon/mockoon/blob/1ed31c4059d7f757f6cb2a43e10dc81b0d9c55a9/packages/commons-server/src/libs/server/server.ts#L1551
CVE ID: CVE-2025-59050 State: PUBLISHED Published: 2025-09-16T16:23:37.866Z Last Updated: 2025-09-16T18:26:45.315Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: greenshot Products: greenshot Problem Types: CWE-502 Description: Greenshot is an open source Windows screenshot utility. Greenshot 1.3.300 and earlier deserializes attacker-controlled data received in a WM_COPYDATA message using BinaryFormatter.Deserialize without prior validation or authentication, allowing a local process at the same integrity level to trigger arbitrary code execution inside the Greenshot process. The vulnerable logic resides in a WinForms WndProc handler for WM_COPYDATA (message
ution inside the Greenshot process. The vulnerable logic resides in a WinForms WndProc handler for WM_COPYDATA (message 74) that copies the supplied bytes into a MemoryStream and invokes BinaryFormatter.Deserialize, and only afterward checks whether the specified channel is authorized. Because the authorization check occurs after deserialization, any gadget chain embedded in the serialized payload executes regardless of channel membership. A local attacker who can send WM_COPYDATA to the Greenshot main window can achieve in-process code execution, which may aid evasion of application control policies by running payloads within the trusted, signed Greenshot.exe process. This issue is fixed in
pplication control policies by running payloads within the trusted, signed Greenshot.exe process. This issue is fixed in version 1.3.301. No known workarounds exist. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/greenshot/greenshot/security/advisories/GHSA-8f7f-x7ww-xx5w - https://github.com/greenshot/greenshot/commit/f5a29a2ed3b0eb49231c0f4618300f488cf1b04d
CVE ID: CVE-2025-59051 State: PUBLISHED Published: 2025-10-14T19:15:54.440Z Last Updated: 2025-10-14T19:28:34.925Z Vendors: FreePBX Products: security-reporting Problem Types: CWE-78 Description: The FreePBX Endpoint Manager module includes a Network Scanning feature that provides web-based access to nmap functionality for network device discovery. In Endpoint Manager 16 before 16.0.92 and 17 before 17.0.6, insufficiently sanitized user-supplied input allows authenticated OS command execution as the asterisk user. Authentication with a known username is required. Updating to Endpoint Manager 16.0.92 or 17.0.6 addresses the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References:
o Endpoint Manager 16.0.92 or 17.0.6 addresses the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/FreePBX/security-reporting/security/advisories/GHSA-qgj3-f9gj-98v9
CVE ID: CVE-2025-59052 State: PUBLISHED Published: 2025-09-10T20:13:56.965Z Last Updated: 2025-09-10T20:25:32.147Z Vendors: angular Products: angular Problem Types: CWE-362 Description: Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Angular uses a DI container (the "platform injector") to hold request-specific state during server-side rendering. For historical reasons, the container was stored as a JavaScript module-scoped global variable. When multiple requests are processed concurrently, they could inadvertently share or overwrite the global injector state. In practical terms, this can lead to one request
they could inadvertently share or overwrite the global injector state. In practical terms, this can lead to one request responding with data meant for a completely different request, leaking data or tokens included on the rendered page or in response headers. As long as an attacker had network access to send any traffic that received a rendered response, they may have been able to send a large number of requests and then inspect the responses for information leaks. The APIs `bootstrapApplication`, `getPlatform`, and `destroyPlatform` were vulnerable and required SSR-only breaking changes. The issue has been patched in all active release lines as well as in the v21 prerelease. Patched package