Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
networks, allowing any container to access all ports on any other container across different bridge networks on the same host. This breaks network segmentation between containers that should be isolated, creating significant risk in multi-tenant environments. Only containers in --internal networks remain protected. Workarounds include reloading firewalld and either restarting the docker daemon, re-creating bridge networks, or using rootless mode. Maintainers anticipate a fix for this issue in version 25.0.13. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/moby/moby/security/advisories/GHSA-4vq8-7jfc-9cvp - https://firewalld.org/documentation/howto/reload-
https://github.com/moby/moby/security/advisories/GHSA-4vq8-7jfc-9cvp - https://firewalld.org/documentation/howto/reload-firewalld.html
CVE ID: CVE-2025-54411 State: PUBLISHED Published: 2025-08-19T16:41:40.362Z Last Updated: 2025-08-19T19:17:28.269Z Vendors: discourse Products: discourse Problem Types: CWE-79 Description: Discourse is an open-source discussion platform. Welcome banner user name string for logged in users can be vulnerable to XSS attacks, which affect the user themselves or an admin impersonating them. Admins can temporarily alter the welcome_banner.header.logged_in_members site text to remove the preferred_display_name placeholder, or not impersonate any users for the time being. This vulnerability is fixed in 3.5.0.beta8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/d
erability is fixed in 3.5.0.beta8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/discourse/discourse/security/advisories/GHSA-5mm6-j5vq-6884 - https://github.com/discourse/discourse/commit/a3374d2850f07444d113216e1d539ee21650dbff
CVE ID: CVE-2025-54412 State: PUBLISHED Published: 2025-07-26T03:29:10.918Z Last Updated: 2025-07-28T13:55:57.057Z Vendors: skops-dev Products: skops Problem Types: CWE-351 Description: skops is a Python library which helps users share and ship their scikit-learn based models. Versions 0.11.0 and below contain a inconsistency in the OperatorFuncNode which can be exploited to hide the execution of untrusted operator methods. This can then be used in a code reuse attack to invoke seemingly safe functions and escalate to arbitrary code execution with minimal and misleading trusted types. This is fixed in version 0.12.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gi
sted types. This is fixed in version 0.12.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/skops-dev/skops/security/advisories/GHSA-m7f4-hrc6-fwg3 - https://github.com/skops-dev/skops/commit/0aeca055509dfb48c1506870aabdd9e247adf603 - https://github.com/skops-dev/skops/releases/tag/v0.12.0
CVE ID: CVE-2025-54413 State: PUBLISHED Published: 2025-07-26T03:29:43.716Z Last Updated: 2025-07-28T13:59:58.255Z Vendors: skops-dev Products: skops Problem Types: CWE-351 Description: skops is a Python library which helps users share and ship their scikit-learn based models. Versions 0.11.0 and below contain an inconsistency in MethodNode, which can be exploited to access unexpected object fields through dot notation. This can be used to achieve arbitrary code execution at load time. While this issue may seem similar to GHSA-m7f4-hrc6-fwg3, it is actually more severe, as it relies on fewer assumptions about trusted types. This is fixed in version 12.0.0. Additional Analyst Notes: - CISA AD
it relies on fewer assumptions about trusted types. This is fixed in version 12.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/skops-dev/skops/security/advisories/GHSA-4v6w-xpmh-gfgp - https://github.com/skops-dev/skops/security/advisories/GHSA-m7f4-hrc6-fwg3 - https://github.com/skops-dev/skops/commit/0aeca055509dfb48c1506870aabdd9e247adf603 - https://drive.google.com/drive/folders/1bmVV18mnPbWy21hVYgf51yVJpf78vtB_?usp=sharing - https://github.com/skops-dev/skops/releases/tag/v0.12.0
CVE ID: CVE-2025-54414 State: PUBLISHED Published: 2025-07-26T03:30:28.951Z Last Updated: 2025-07-28T14:12:08.914Z Vendors: TecharoHQ Products: anubis Problem Types: CWE-80, CWE-601 Description: Anubis is a Web AI Firewall Utility that weighs the soul of users' connections using one or more challenges in order to protect upstream resources from scraper bots. In versions 1.21.2 and below, attackers can craft malicious pass-challenge pages that cause a user to execute arbitrary JavaScript code or trigger other nonstandard schemes. An incomplete version of this fix was tagged at 1.21.2 and then the release process was aborted upon final testing. To work around this issue: block any requests to
at 1.21.2 and then the release process was aborted upon final testing. To work around this issue: block any requests to the /.within.website/x/cmd/anubis/api/pass-challenge route with the ?redir= parameter set to anything that doesn't start with the URL scheme http, https, or no scheme (local path redirect). This was fixed in version 1.21.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/TecharoHQ/anubis/security/advisories/GHSA-jhjj-2g64-px7c - https://github.com/TecharoHQ/anubis/pull/904 - https://github.com/TecharoHQ/anubis/releases/tag/v1.21.3
CVE ID: CVE-2025-54415 State: PUBLISHED Published: 2025-07-26T03:33:39.933Z Last Updated: 2025-07-28T14:44:53.312Z Vendors: astronomer Products: dag-factory Problem Types: CWE-78 Description: dag-factory is a library for Apache Airflow® to construct DAGs declaratively via configuration files. In versions 0.23.0a8 and below, a high-severity vulnerability has been identified in the cicd.yml workflow within the astronomer/dag-factory GitHub repository. The workflow, specifically when triggered by pull_request_target, is susceptible to exploitation, allowing an attacker to execute arbitrary code within the GitHub Actions runner environment. This misconfiguration enables an attacker to establish
ute arbitrary code within the GitHub Actions runner environment. This misconfiguration enables an attacker to establish a reverse shell, exfiltrate sensitive secrets, including the highly-privileged GITHUB_TOKEN, and ultimately gain full control over the repository. This is fixed in version 0.23.0a9. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/astronomer/dag-factory/security/advisories/GHSA-g5hx-xv45-9whg - https://github.com/astronomer/dag-factory/pull/460 - https://github.com/astronomer/dag-factory/pull/466 - https://github.com/astronomer/dag-factory/commit/751c0e58369e784f6a924347e381a705ea8133fe
CVE ID: CVE-2025-54416 State: PUBLISHED Published: 2025-07-26T03:34:31.288Z Last Updated: 2025-07-28T18:55:45.827Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L) Vendors: tj-actions Products: branch-names Problem Types: CWE-77 Description: tj-actions/branch-names is a Github actions repository that contains workflows to retrieve branch or tag names with support for all events. In versions 8.2.1 and below, a critical vulnerability has been identified in the tj-actions/branch-names' GitHub Action workflow which allows arbitrary command execution in downstream workflows. This issue arises due to inconsistent input sanitization and unescaped output, enabling malicious
downstream workflows. This issue arises due to inconsistent input sanitization and unescaped output, enabling malicious actors to exploit specially crafted branch names or tags. While internal sanitization mechanisms have been implemented, the action outputs remain vulnerable, exposing consuming workflows to significant security risks. This is fixed in version 9.0.0 Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/tj-actions/branch-names/security/advisories/GHSA-gq52-6phf-x2r6 - https://github.com/tj-actions/branch-names/commit/e497ceb8ccd43fd9573cf2e375216625bc411d1f - https://github.com/tj-actions/branch-names/releases/tag/v9.0.0
CVE ID: CVE-2025-54417 State: PUBLISHED Published: 2025-08-09T01:31:23.974Z Last Updated: 2025-08-11T13:38:51.609Z Vendors: craftcms Products: cms Problem Types: CWE-94 Description: Craft is a platform for creating digital experiences. Versions 4.13.8 through 4.16.2 and 5.5.8 through 5.8.3 contain a vulnerability that can bypass CVE-2025-23209: "Craft CMS has a potential RCE with a compromised security key". To exploit this vulnerability, the project must meet these requirements: have a compromised security key and create an arbitrary file in Craft's /storage/backups folder. With those criteria in place, attackers could create a specific, malicious request to the /updater/restore-db endpoint
. With those criteria in place, attackers could create a specific, malicious request to the /updater/restore-db endpoint and execute CLI commands remotely. This issue is fixed in versions 4.16.3 and 5.8.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/craftcms/cms/security/advisories/GHSA-2vcf-qxv3-2mgw - https://github.com/craftcms/cms/commit/a19d46be78a9ca1ea474012a10e97bed0d787f57
CVE ID: CVE-2025-54418 State: PUBLISHED Published: 2025-07-28T14:47:20.887Z Last Updated: 2025-07-28T17:19:14.503Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: codeigniter4 Products: CodeIgniter4 Problem Types: CWE-78 Description: CodeIgniter is a PHP full-stack web framework. A command injection vulnerability present in versions prior to 4.6.2 affects applications that use the ImageMagick handler for image processing (`imagick` as the image library) and either allow file uploads with user-controlled filenames and process uploaded images using the `resize()` method or use the `text()` method with user-controlled text content or options. An attacker can
es using the `resize()` method or use the `text()` method with user-controlled text content or options. An attacker can upload a file with a malicious filename containing shell metacharacters that get executed when the image is processed or provide malicious text content or options that get executed when adding text to images Users should upgrade to v4.6.2 or later to receive a patch. As a workaround, switch to the GD image handler (`gd`, the default handler), which is not affected by either vulnerability. For file upload scenarios, instead of using user-provided filenames, generate random names to eliminate the attack vector with `getRandomName()` when using the `move()` method, or use the
generate random names to eliminate the attack vector with `getRandomName()` when using the `move()` method, or use the `store()` method, which automatically generates safe filenames. For text operations, if one must use ImageMagick with user-controlled text, sanitize the input to only allow safe characters and validate/restrict text options. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/codeigniter4/CodeIgniter4/security/advisories/GHSA-9952-gv64-x94c - https://github.com/codeigniter4/CodeIgniter4/commit/e18120bff1da691e1d15ffc1bf553ae7411762c0 - https://cwe.mitre.org/data/definitions/78.html - https://owasp.org/www-community/attacks/Command_Injection
CVE ID: CVE-2025-54419 State: PUBLISHED Published: 2025-07-28T19:47:46.584Z Last Updated: 2025-07-28T20:39:07.897Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N) Vendors: node-saml Products: node-saml Problem Types: CWE-287, CWE-347 Description: A SAML library not dependent on any frameworks that runs in Node. In version 5.0.1, Node-SAML loads the assertion from the (unsigned) original response document. This is different than the parts that are verified when checking signature. This allows an attacker to modify authentication details within a valid SAML assertion. For example, in one attack it is possible to remove any character from the SAML assertion username. T
id SAML assertion. For example, in one attack it is possible to remove any character from the SAML assertion username. To conduct the attack an attacker would need a validly signed document from the identity provider (IdP). This is fixed in version 5.1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/node-saml/node-saml/security/advisories/GHSA-4mxg-3p6v-xgq3 - https://github.com/node-saml/node-saml/commit/31ead9411ebc3e2385086fa9149b6c17732bca10 - https://github.com/node-saml/node-saml/releases/tag/v5.1.0
CVE ID: CVE-2025-54420 State: REJECTED Published: N/A Last Updated: 2025-07-29T16:24:29.473Z Description: No description available.
CVE ID: CVE-2025-54421 State: PUBLISHED Published: 2025-08-18T16:01:30.994Z Last Updated: 2025-08-18T17:36:09.856Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: NamelessMC Products: Nameless Problem Types: CWE-79, CWE-80 Description: NamelessMC is a free, easy to use & powerful website software for Minecraft servers. Cross-site scripting (XSS) vulnerability in NamelessMC before 2.2.4 allows remote authenticated attackers to inject arbitrary web script or HTML via the default_keywords crafted parameter. This vulnerability is fixed in 2.2.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/NamelessMC/Nameless/security/advisor
Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/NamelessMC/Nameless/security/advisories/GHSA-f5rm-w4mx-q7rx - https://github.com/NamelessMC/Nameless/commit/56d35cff9ee944c061791ef478cabd2bed0223c4
CVE ID: CVE-2025-54422 State: PUBLISHED Published: 2025-07-29T12:47:50.414Z Last Updated: 2025-07-29T13:29:56.118Z Vendors: sandboxie-plus Products: Sandboxie Problem Types: CWE-312, CWE-322, CWE-497, CWE-522 Description: Sandboxie is a sandbox-based isolation software for 32-bit and 64-bit Windows NT-based operating systems. In versions 1.16.1 and below, a critical security vulnerability exists in password handling mechanisms. During encrypted sandbox creation, user passwords are transmitted via shared memory, exposing them to potential interception. The vulnerability is particularly severe during password modification operations, where both old and new passwords are passed as plaintext com
articularly severe during password modification operations, where both old and new passwords are passed as plaintext command-line arguments to the Imbox process without any encryption or obfuscation. This implementation flaw allows any process within the user session, including unprivileged processes, to retrieve these sensitive credentials by reading the command-line arguments, thereby bypassing standard privilege requirements and creating a significant security risk. This is fixed in version 1.16.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/sandboxie-plus/Sandboxie/security/advisories/GHSA-jp7r-vgv9-43p7 - https://github.com/sandboxie-plus/Sandboxi
github.com/sandboxie-plus/Sandboxie/security/advisories/GHSA-jp7r-vgv9-43p7 - https://github.com/sandboxie-plus/Sandboxie/commit/d107d5743880da28e782c1771b5246b2a512989a - https://github.com/sandboxie-plus/Sandboxie/releases/tag/v1.16.2
CVE ID: CVE-2025-54423 State: PUBLISHED Published: 2025-07-28T19:53:24.109Z Last Updated: 2025-07-28T20:20:15.875Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N) Vendors: 9001 Products: copyparty Problem Types: CWE-79 Description: copyparty is a portable file server. In versions up to and including versions 1.18.4, an unauthenticated attacker is able to execute arbitrary JavaScript code in a victim's browser due to improper sanitization of multimedia tags in music files, including m3u files. This is fixed in version 1.18.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/9001/copyparty/security/advisories/GHSA-9q4r-x2hj-jmvr - htt
: - CISA ADP Vulnrichment: References: - https://github.com/9001/copyparty/security/advisories/GHSA-9q4r-x2hj-jmvr - https://github.com/9001/copyparty/commit/895880aeb0be0813ddf732487596633f8f9fc3a6 - https://github.com/9001/copyparty/releases/tag/v1.18.5
CVE ID: CVE-2025-54424 State: PUBLISHED Published: 2025-08-01T23:04:38.142Z Last Updated: 2025-08-04T14:18:25.328Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: 1Panel-dev Products: 1Panel Problem Types: CWE-77 Description: 1Panel is a web interface and MCP Server that manages websites, files, containers, databases, and LLMs on a Linux server. In versions 2.0.5 and below, the HTTPS protocol used for communication between the Core and Agent endpoints has incomplete certificate verification during certificate validation, leading to unauthorized interface access. Due to the presence of numerous command execution or high-privilege interfaces in 1Panel, this resu
ed interface access. Due to the presence of numerous command execution or high-privilege interfaces in 1Panel, this results in Remote Code Execution (RCE). This is fixed in version 2.0.6. The CVE has been translated from Simplified Chinese using GitHub Copilot. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/1Panel-dev/1Panel/security/advisories/GHSA-8j63-96wh-wh3j - https://github.com/1Panel-dev/1Panel/pull/9698/commits/4003284521f8d31ddaf7215d1c30ab8b4cdb0261 - https://github.com/1Panel-dev/1Panel/releases/tag/v2.0.6
CVE ID: CVE-2025-54425 State: PUBLISHED Published: 2025-07-30T13:41:07.799Z Last Updated: 2025-07-30T14:06:12.115Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: umbraco Products: Umbraco-CMS Problem Types: CWE-200 Description: Umbraco is an ASP.NET CMS. In versions 13.0.0 through 13.9.2, 15.0.0 through 15.4.1 and 16.0.0 through 16.1.0, the content delivery API can be restricted from public access where an API key must be provided in a header to authorize the request. It's also possible to configure output caching, such that the delivery API outputs will be cached for a period of time, improving performance. There's an issue when these two things are used t
PI outputs will be cached for a period of time, improving performance. There's an issue when these two things are used together, where caching doesn't vary by the header that contains the API key. As such, it's possible for a user without a valid API key to retrieve a response for a given path and query if it has recently been requested and cached by request with a valid key. This is fixed in versions 13.9.3, 15.4.4 and 16.1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/umbraco/Umbraco-CMS/security/advisories/GHSA-75vq-qvhr-7ffr - https://github.com/umbraco/Umbraco-CMS/commit/7e82c258eebaa595eadc9b000461e27d02bc030e - https://github.com/umbraco/Umbrac
tps://github.com/umbraco/Umbraco-CMS/commit/7e82c258eebaa595eadc9b000461e27d02bc030e - https://github.com/umbraco/Umbraco-CMS/commit/9f37db18d11c8ba4e3ecdeb35291af30ebee7cd0 - https://github.com/umbraco/Umbraco-CMS/commit/da43086017e1e318f6b5373391d78421efebce3a - https://docs.umbraco.com/umbraco-cms/reference/content-delivery-api
CVE ID: CVE-2025-54426 State: PUBLISHED Published: 2025-07-28T20:08:22.886Z Last Updated: 2025-07-28T20:26:18.866Z Vendors: polkadot-evm Products: frontier Problem Types: CWE-327 Description: Polkadot Frontier is an Ethereum and EVM compatibility layer for Polkadot and Substrate. In versions prior to commit 36f70d1, the Curve25519Add and Curve25519ScalarMul precompiles incorrectly handle invalid Ristretto point representations. Instead of returning an error, they silently treat invalid input bytes as the Ristretto identity element, leading to potentially incorrect cryptographic results. This is fixed in commit 36f70d1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://
phic results. This is fixed in commit 36f70d1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/polkadot-evm/frontier/security/advisories/GHSA-v4q3-23rh-w5mw - https://github.com/polkadot-evm/frontier/pull/1720/commits/8ed6053fb868495477ba2409f7e64f439df76f96 - https://github.com/polkadot-evm/frontier/commit/36f70d1defcaeaed5a453015f6c98c21bb5b121b - https://dotpal.io/assets/files/frontier-srlabs-2505-718c3bfa5df9fed1862fed05de506859.pdf
CVE ID: CVE-2025-54427 State: PUBLISHED Published: 2025-07-28T20:20:04.064Z Last Updated: 2025-07-28T20:38:02.249Z Vendors: polkadot-evm Products: frontier Problem Types: CWE-682, CWE-754 Description: Polkadot Frontier is an Ethereum and EVM compatibility layer for Polkadot and Substrate. The extrinsic note_min_gas_price_target is an inherent extrinsic, meaning only the block producer can call it. To ensure correctness, the ProvideInherent trait should be implemented for each inherent, which includes the check_inherent call. This allows other nodes to verify if the input (in this case, the target value) is correct. However, prior to commit a754b3d, the check_inherent function has not been im
n this case, the target value) is correct. However, prior to commit a754b3d, the check_inherent function has not been implemented for note_min_gas_price_target. This lets the block producer set the target value without verification. The target is then used to set the MinGasPrice, which has an upper and lower bound defined in the on_initialize hook. The block producer can set the target to the upper bound. Which also increases the upper and lower bounds for the next block. Over time, this could result in continuously raising the gas price, making contract execution too expensive and ineffective for users. An attacker could use this flaw to manipulate the gas price, potentially leading to sign
sive and ineffective for users. An attacker could use this flaw to manipulate the gas price, potentially leading to significantly inflated transaction fees. Such manipulation could render contract execution prohibitively expensive for users, effectively resulting in a denial-of-service condition for the network. This is fixed in version a754b3d. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/polkadot-evm/frontier/security/advisories/GHSA-r6rj-gmqh-cv94 - https://github.com/polkadot-evm/frontier/commit/a754b3dc6e1b6da98f71aea7bb1fa08677b24186 - https://dotpal.io/assets/files/frontier-srlabs-2505-718c3bfa5df9fed1862fed05de506859.pdf
CVE ID: CVE-2025-54428 State: PUBLISHED Published: 2025-07-28T20:28:02.575Z Last Updated: 2025-07-28T20:36:02.377Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: musombi123 Products: RevelaCode-Backend Problem Types: CWE-522 Description: RevelaCode is an AI-powered faith-tech project that decodes biblical verses, prophecies and global events into accessible language. In versions below 1.0.1, a valid MongoDB Atlas URI with embedded username and password was accidentally committed to the public repository. This could allow unauthorized access to production or staging databases, potentially leading to data exfiltration, modification, or deletion. This is fix
ess to production or staging databases, potentially leading to data exfiltration, modification, or deletion. This is fixed in version 1.0.1. Workarounds include: immediately rotating credentials for the exposed database user, using a secret manager (like Vault, Doppler, AWS Secrets Manager, etc.) instead of storing secrets directly in code, or auditing recent access logs for suspicious activity. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/musombi123/RevelaCode-Backend/security/advisories/GHSA-m253-qvcr-cr48 - https://github.com/musombi123/RevelaCode-Backend/commit/95005cf4bacf1b005aef9d4b8e85237c98492d83