Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-54546 State: PUBLISHED Published: 2025-10-29T22:40:57.833Z Last Updated: 2025-10-30T14:15:10.106Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Arista Networks Products: DANZ Monitoring Fabric Problem Types: CWE-732 Description: On affected platforms, restricted users could use SSH port forwarding to access host-internal services Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.arista.com/en/support/advisories-notices/security-advisory/22538-security-advisory-0124
CVE ID: CVE-2025-54547 State: PUBLISHED Published: 2025-10-29T22:45:53.499Z Last Updated: 2025-10-30T14:15:29.632Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: Arista Networks Products: DANZ Monitoring Fabric Problem Types: CWE-613 Description: On affected platforms, if SSH session multiplexing was configured on the client side, SSH sessions (e.g, scp, sftp) multiplexed onto the same channel could perform file-system operations after a configured session timeout expired Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.arista.com/en/support/advisories-notices/security-advisory/22538-security-advisory-0124
CVE ID: CVE-2025-54548 State: PUBLISHED Published: 2025-10-29T22:52:54.039Z Last Updated: 2025-10-30T14:15:49.212Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Arista Networks Products: DANZ Monitoring Fabric Problem Types: CWE-200 Description: On affected platforms, restricted users could view sensitive portions of the config database via a debug API (e.g., user password hashes) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.arista.com/en/support/advisories-notices/security-advisory/22538-security-advisory-0124
CVE ID: CVE-2025-54549 State: PUBLISHED Published: 2025-10-29T22:55:54.433Z Last Updated: 2025-10-30T14:12:59.838Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N) Vendors: Arista Networks Products: DANZ Monitoring Fabric Problem Types: CWE-347 Description: Cryptographic validation of upgrade images could be circumventing by dropping a specifically crafted file into the upgrade ISO Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.arista.com/en/support/advisories-notices/security-advisory/22538-security-advisory-0124
CVE ID: CVE-2025-54551 State: PUBLISHED Published: 2025-08-20T04:57:37.466Z Last Updated: 2025-08-20T17:39:58.306Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: FUJIFILM Healthcare Americas Corporation Products: Synapse Mobility Problem Types: CWE-472 Description: Synapse Mobility 8.0, 8.0.1, 8.0.2, 8.1, and 8.1.1 contain a privilege escalation vulnerability through external control of Web parameter. If exploited, a user of the product may escalate the privilege and access data that the user do not have permission to view by altering the parameters of the search function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://healthcareso
parameters of the search function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://healthcaresolutions-us.fujifilm.com/synapse-mobility-vulnerability-notification - https://jvn.jp/en/vu/JVNVU94286093/
CVE ID: CVE-2025-54554 State: PUBLISHED Published: 2025-08-04T00:00:00.000Z Last Updated: 2025-08-05T17:41:14.594Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Tera Insights Products: tiCrypt Problem Types: CWE-863 Description: tiaudit in Tera Insights tiCrypt before 2025-07-17 allows unauthenticated REST API requests that reveal sensitive information about the underlying SQL queries and database structure. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://ticrypt.com/docs/ticrypt-backend/audit/rest - https://github.com/Aman-Parmar/CVE-2025-54554
CVE ID: CVE-2025-54558 State: PUBLISHED Published: 2025-07-25T00:00:00.000Z Last Updated: 2025-07-25T13:23:27.135Z Severity: MEDIUM (CVSS 4.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: OpenAI Products: Codex CLI Problem Types: CWE-829 Description: OpenAI Codex CLI before 0.9.0 auto-approves ripgrep (aka rg) execution even with the --pre or --hostname-bin or --search-zip or -z flag. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/openai/codex/pull/1644 - https://github.com/openai/codex/compare/rust-v0.8.0...rust-v0.9.0 - https://github.com/openai/codex/commit/6cf4b96f9dbbef8a94acc1ff703eb118481514d8
CVE ID: CVE-2025-54559 State: PUBLISHED Published: 2025-11-14T00:00:00.000Z Last Updated: 2025-11-14T20:26:54.403Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows remote Path Traversal for loading arbitrary external content. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://desktopalert.net - https://desktopalert.net/cve-2025-54559/
CVE ID: CVE-2025-54560 State: PUBLISHED Published: 2025-11-14T00:00:00.000Z Last Updated: 2025-11-14T19:55:49.404Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Server-side Request Forgery vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows Probing of internal infrastructure. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://desktopalert.net - https://desktopalert.net/cve-2025-54560/
CVE ID: CVE-2025-54561 State: PUBLISHED Published: 2025-11-14T00:00:00.000Z Last Updated: 2025-11-14T18:37:55.314Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Incorrect Access Control vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows remote access to content despite lack of the correct permission through a Broken Authorization Schema. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://desktopalert.net - https://desktopalert.net/cve-2025-54561/
CVE ID: CVE-2025-54562 State: PUBLISHED Published: 2025-11-14T00:00:00.000Z Last Updated: 2025-11-14T18:37:34.252Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows Technical Information to be Disclosed through stack trace. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://desktopalert.net - https://desktopalert.net/cve-2025-54562/
CVE ID: CVE-2025-54563 State: PUBLISHED Published: 2025-11-24T00:00:00.000Z Last Updated: 2025-11-24T21:38:12.789Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Incorrect Access Control vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows Incorrect Access Control, leading to Remote Information Disclosure. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://desktopalert.net/cve-2025-54563/
CVE ID: CVE-2025-54564 State: PUBLISHED Published: 2025-08-01T00:00:00.000Z Last Updated: 2025-08-01T19:29:50.133Z Vendors: n/a Products: n/a Problem Types: n/a Description: uploadsm in ChargePoint Home Flex 5.5.4.13 does not validate a user-controlled string for bz2 decompression, which allows command execution as the nobody user. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/koharin/CVE/blob/main/CVE-2025-54564
CVE ID: CVE-2025-54566 State: PUBLISHED Published: 2025-07-25T00:00:00.000Z Last Updated: 2025-07-25T13:22:44.803Z Severity: MEDIUM (CVSS 4.2 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: QEMU Products: QEMU Problem Types: CWE-642 Description: hw/pci/pcie_sriov.c in QEMU through 10.0.3 has a migration state inconsistency, a related issue to CVE-2024-26327. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://lore.kernel.org/qemu-devel/20250713-wmask-v1-1-4c744cdb32c0@rsg.ci.i.u-tokyo.ac.jp/
CVE ID: CVE-2025-54567 State: PUBLISHED Published: 2025-07-25T00:00:00.000Z Last Updated: 2025-07-25T13:21:58.525Z Severity: MEDIUM (CVSS 4.2 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: QEMU Products: QEMU Problem Types: CWE-684 Description: hw/pci/pcie_sriov.c in QEMU through 10.0.3 mishandles the VF Enable bit write mask, a related issue to CVE-2024-26327. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://lore.kernel.org/qemu-devel/20250713-wmask-v1-1-4c744cdb32c0@rsg.ci.i.u-tokyo.ac.jp/
CVE ID: CVE-2025-54568 State: PUBLISHED Published: 2025-07-25T00:00:00.000Z Last Updated: 2025-07-25T13:20:59.016Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Akamai Products: Rate Control Problem Types: CWE-684 Description: Akamai Rate Control alpha before 2025 allows attackers to send requests above the stipulated thresholds because the rate is measured separately for each edge node. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/geo-chen/Akamai/blob/main/Edge%20Hopping.md - http://techdocs.akamai.com/app-api-protector/docs/improved-rate-accounting
CVE ID: CVE-2025-54569 State: PUBLISHED Published: 2025-07-28T00:00:00.000Z Last Updated: 2025-07-28T13:37:41.044Z Severity: MEDIUM (CVSS 4.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N) Vendors: Malwarebytes Products: Binisoft Windows Firewall Control Problem Types: CWE-863 Description: In Malwarebytes Binisoft Windows Firewall Control before 6.16.0.0, the installer is vulnerable to local privilege escalation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.malwarebytes.com/secure/cves/cve-2025-54569
CVE ID: CVE-2025-54571 State: PUBLISHED Published: 2025-08-05T23:39:40.712Z Last Updated: 2025-11-03T18:13:36.309Z Vendors: owasp-modsecurity Products: ModSecurity Problem Types: CWE-252 Description: ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. In versions 2.9.11 and below, an attacker can override the HTTP response’s Content-Type, which could lead to several issues depending on the HTTP scenario. For example, we have demonstrated the potential for XSS and arbitrary script source code disclosure in the latest version of mod_security2. This issue is fixed in version 2.9.12. Additional Analyst Notes: - CISA ADP Vulnrichment: - C
version of mod_security2. This issue is fixed in version 2.9.12. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/owasp-modsecurity/ModSecurity/security/advisories/GHSA-cg44-9m43-3f9v - https://github.com/owasp-modsecurity/ModSecurity/issues/2514 - https://github.com/owasp-modsecurity/ModSecurity/commit/6d7e8eb18f2d7d368fb8e29516fcdeaeb8d349b8
CVE ID: CVE-2025-54572 State: PUBLISHED Published: 2025-07-30T14:05:43.820Z Last Updated: 2025-11-03T18:13:37.284Z Vendors: SAML-Toolkits Products: ruby-saml Problem Types: CWE-400, CWE-770 Description: The Ruby SAML library is for implementing the client side of a SAML authorization. In versions 1.18.0 and below, a denial-of-service vulnerability exists in ruby-saml even with the message_max_bytesize setting configured. The vulnerability occurs because the SAML response is validated for Base64 format prior to checking the message size, leading to potential resource exhaustion. This is fixed in version 1.18.1. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: Refere
ion. This is fixed in version 1.18.1. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/SAML-Toolkits/ruby-saml/security/advisories/GHSA-rrqh-93c8-j966 - https://github.com/SAML-Toolkits/ruby-saml/pull/770 - https://github.com/SAML-Toolkits/ruby-saml/commit/38ef5dd1ce17514e202431f569c4f5633e6c2709 - https://github.com/SAML-Toolkits/ruby-saml/releases/tag/v1.18.1
CVE ID: CVE-2025-54573 State: PUBLISHED Published: 2025-07-30T14:32:03.675Z Last Updated: 2025-07-30T14:45:10.490Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: cvat-ai Products: cvat Problem Types: CWE-287 Description: CVAT is an open source interactive video and image annotation tool for computer vision. In versions 1.1.0 through 2.41.0, email verification was not enforced when using Basic HTTP Authentication. As a result, users could create accounts using fake email addresses and use the product as verified users. Additionally, the missing email verification check leaves the system open to bot signups and further usage. CVAT 2.42.0 and later versions co
sing email verification check leaves the system open to bot signups and further usage. CVAT 2.42.0 and later versions contain a fix for the issue. CVAT Enterprise customers have a workaround available; those customers may disable registration to prevent this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/cvat-ai/cvat/security/advisories/GHSA-fxgh-m76j-242q - https://github.com/cvat-ai/cvat/commit/bc20eff16b8406fbb755f6540e6f269da0c9c5b2
CVE ID: CVE-2025-54574 State: PUBLISHED Published: 2025-08-01T18:02:19.117Z Last Updated: 2025-11-05T17:04:21.087Z Severity: CRITICAL (CVSS 9.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:H) Vendors: squid-cache Products: squid Problem Types: CWE-122 Description: Squid is a caching proxy for the Web. In versions 6.3 and below, Squid is vulnerable to a heap buffer overflow and possible remote code execution attack when processing URN due to incorrect buffer management. This has been fixed in version 6.4. To work around this issue, disable URN access permissions. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/squid-cache/squid/securi
alyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/squid-cache/squid/security/advisories/GHSA-w4gv-vw3f-29g3 - https://github.com/squid-cache/squid/commit/a27bf4b84da23594150c7a86a23435df0b35b988 - https://github.com/squid-cache/squid/releases/tag/SQUID_6_4
CVE ID: CVE-2025-54575 State: PUBLISHED Published: 2025-07-30T19:55:16.248Z Last Updated: 2025-07-30T19:59:35.532Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: SixLabors Products: ImageSharp Problem Types: CWE-400, CWE-770 Description: ImageSharp is a 2D graphics library. In versions below 2.1.11 and 3.0.0 through 3.1.10, a specially crafted GIF file containing a malformed comment extension block (with a missing block terminator) can cause the ImageSharp GIF decoder to enter an infinite loop while attempting to skip the block. This leads to a denial of service. Applications processing untrusted GIF input should upgrade to a patched version. This issue is
to a denial of service. Applications processing untrusted GIF input should upgrade to a patched version. This issue is fixed in versions 2.1.11 and 3.1.11. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/SixLabors/ImageSharp/security/advisories/GHSA-rxmq-m78w-7wmc - https://github.com/SixLabors/ImageSharp/issues/2953 - https://github.com/SixLabors/ImageSharp/commit/55e49262df9a057dff9b7807ed1b7bdb49187c3f - https://github.com/SixLabors/ImageSharp/commit/833f3ceec35af6b775950e06f03b934546cefbf6
CVE ID: CVE-2025-54576 State: PUBLISHED Published: 2025-07-30T19:41:04.189Z Last Updated: 2025-07-30T19:55:28.553Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: oauth2-proxy Products: oauth2-proxy Problem Types: CWE-290 Description: OAuth2-Proxy is an open-source tool that can act as either a standalone reverse proxy or a middleware component integrated into existing reverse proxy or load balancer setups. In versions 7.10.0 and below, oauth2-proxy deployments are vulnerable when using the skip_auth_routes configuration option with regex patterns. Attackers can bypass authentication by crafting URLs with query parameters that satisfy configured regex patt
patterns. Attackers can bypass authentication by crafting URLs with query parameters that satisfy configured regex patterns, allowing unauthorized access to protected resources. The issue stems from skip_auth_routes matching against the full request URI. Deployments using skip_auth_routes with regex patterns containing wildcards or broad matching patterns are most at risk. This issue is fixed in version 7.11.0. Workarounds include: auditing all skip_auth_routes configurations for overly permissive patterns, replacing wildcard patterns with exact path matches where possible, ensuring regex patterns are properly anchored (starting with ^ and ending with $), or implementing custom validation t
, ensuring regex patterns are properly anchored (starting with ^ and ending with $), or implementing custom validation that strips query parameters before regex matching. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/oauth2-proxy/oauth2-proxy/security/advisories/GHSA-7rh7-c77v-6434 - https://github.com/oauth2-proxy/oauth2-proxy/commit/9ffafad4b2d2f9f7668e5504565f356a7c047b77 - https://github.com/oauth2-proxy/oauth2-proxy/blob/f4b33b64bd66ad28e9b0d63bea51837b83c00ca1/oauthproxy.go#L582-L584 - https://github.com/oauth2-proxy/oauth2-proxy/blob/f4b33b64bd66ad28e9b0d63bea51837b83c00ca1/pkg/requests/util/util.go#L37-L44 - https://github.com/oauth2-proxy/oauth2
blob/f4b33b64bd66ad28e9b0d63bea51837b83c00ca1/pkg/requests/util/util.go#L37-L44 - https://github.com/oauth2-proxy/oauth2-proxy/releases/tag/v7.11.0 - https://oauth2-proxy.github.io/oauth2-proxy/configuration/overview/#proxy-options
CVE ID: CVE-2025-54581 State: PUBLISHED Published: 2025-07-30T19:57:46.454Z Last Updated: 2025-07-30T20:23:36.826Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: 0x676e67 Products: vproxy Problem Types: CWE-369 Description: vproxy is an HTTP/HTTPS/SOCKS5 proxy server. In versions 2.3.3 and below, untrusted data is extracted from the user-controlled HTTP Proxy-Authorization header and passed to Extension::try_from and flows into parse_ttl_extension where it is parsed as a TTL value. If an attacker supplies a TTL of zero (e.g. by using a username such as 'configuredUser-ttl-0'), the modulo operation 'timestamp % ttl' will cause a division by zero panic, causing
ame such as 'configuredUser-ttl-0'), the modulo operation 'timestamp % ttl' will cause a division by zero panic, causing the server to crash causing a denial-of-service. This is fixed in version 2.4.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/0x676e67/vproxy/security/advisories/GHSA-7h24-c332-p48c - https://github.com/0x676e67/vproxy/commit/aa1bf64c5e7f1c471395f9f29175ffc1b16a1079 - https://github.com/0x676e67/vproxy/releases/tag/v2.4.0
CVE ID: CVE-2025-54582 State: REJECTED Published: N/A Last Updated: 2025-07-30T19:16:46.652Z Description: No description available.
CVE ID: CVE-2025-54583 State: PUBLISHED Published: 2025-07-30T19:59:44.317Z Last Updated: 2025-07-30T20:13:10.804Z Vendors: finos Products: git-proxy Problem Types: CWE-863 Description: GitProxy is an application that stands between developers and a Git remote endpoint (e.g., github.com). Versions 1.19.1 and below allow users to push to remote repositories while bypassing policies and explicit approvals. Since checks and plugins are skipped, code containing secrets or unwanted changes could be pushed into a repository. This is fixed in version 1.19.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/finos/git-proxy/security/advisories/GHSA-qr93-8wwf-22g4 -
es: - CISA ADP Vulnrichment: References: - https://github.com/finos/git-proxy/security/advisories/GHSA-qr93-8wwf-22g4 - https://github.com/finos/git-proxy/commit/a620a2f33c39c78e01783a274580bf822af3cc3a - https://github.com/finos/git-proxy/commit/bd2ecb2099cba21bca3941ee4d655d2eb887b3a9 - https://github.com/finos/git-proxy/releases/tag/v1.19.2
CVE ID: CVE-2025-54584 State: PUBLISHED Published: 2025-07-30T20:01:16.338Z Last Updated: 2025-07-30T20:19:21.613Z Vendors: finos Products: git-proxy Problem Types: CWE-115 Description: GitProxy is an application that stands between developers and a Git remote endpoint (e.g., github.com). In versions 1.19.1 and below, an attacker can craft a malicious Git packfile to exploit the PACK signature detection in the parsePush.ts file. By embedding a misleading PACK signature within commit content and carefully constructing the packet structure, the attacker can trick the parser into treating invalid or unintended data as the packfile. Potentially, this would allow bypassing approval or hiding comm
nto treating invalid or unintended data as the packfile. Potentially, this would allow bypassing approval or hiding commits. This issue is fixed in version 1.19.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/finos/git-proxy/security/advisories/GHSA-xxmh-rf63-qwjv - https://github.com/finos/git-proxy/commit/333c98a165a5a1ec88414db3d4a2c6f81e083e0f - https://github.com/finos/git-proxy/commit/a620a2f33c39c78e01783a274580bf822af3cc3a - https://github.com/finos/git-proxy/releases/tag/v1.19.2
CVE ID: CVE-2025-54585 State: PUBLISHED Published: 2025-07-30T20:17:20.844Z Last Updated: 2025-07-30T20:30:27.179Z Vendors: finos Products: git-proxy Problem Types: CWE-285 Description: GitProxy is an application that stands between developers and a Git remote endpoint. In versions 1.19.1 and below, attackers can exploit the way GitProxy handles new branch creation to bypass the approval of prior commits on the parent branch. The vulnerability impacts all users or organizations relying on GitProxy to enforce policy and prevent unapproved changes. It requires no elevated privileges beyond regular push access, and no extra user interaction. It does however, require a GitProxy administrator or
vileges beyond regular push access, and no extra user interaction. It does however, require a GitProxy administrator or designated user (canUserApproveRejectPush) to approve pushes to the child branch. This is fixed in version 1.19.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/finos/git-proxy/security/advisories/GHSA-39p2-8hq9-fwj6 - https://github.com/finos/git-proxy/commit/a620a2f33c39c78e01783a274580bf822af3cc3a - https://github.com/finos/git-proxy/commit/f99fe42082eab0970e4cd0acdc3421a527a7e531 - https://github.com/finos/git-proxy/releases/tag/v1.19.2
CVE ID: CVE-2025-54586 State: PUBLISHED Published: 2025-07-30T21:14:41.238Z Last Updated: 2025-07-31T17:55:46.333Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N) Vendors: finos Products: git-proxy Problem Types: CWE-200 Description: GitProxy is an application that stands between developers and a Git remote endpoint. In versions 1.19.1 and below, attackers can inject extra commits into the pack sent to GitHub, commits that aren’t pointed to by any branch. Although these “hidden” commits never show up in the repository’s visible history, GitHub still serves them at their direct commit URLs. This lets an attacker exfiltrate sensitive data without ever leaving a trace in
erves them at their direct commit URLs. This lets an attacker exfiltrate sensitive data without ever leaving a trace in the branch view. We rate this a High‑impact vulnerability because it completely compromises repository confidentiality. This is fixed in version 1.19.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/finos/git-proxy/security/advisories/GHSA-v98g-8rqx-g93g - https://github.com/finos/git-proxy/commit/9c1449f4ec37d2d1f3edf4328bc3757e8dba2110 - https://github.com/finos/git-proxy/commit/a620a2f33c39c78e01783a274580bf822af3cc3a - https://github.com/finos/git-proxy/releases/tag/v1.19.2