Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-54994 State: PUBLISHED Published: 2025-09-08T19:37:42.667Z Last Updated: 2025-09-08T19:53:45.662Z Vendors: akoskm Products: create-mcp-server-stdio Problem Types: CWE-78 Description: @akoskm/create-mcp-server-stdio is an MCP server starter kit that uses the StdioServerTransport. Prior to version 0.0.13, the MCP Server is written in a way that is vulnerable to command injection vulnerability attacks as part of some of its MCP Server tool definition and implementation. The MCP Server exposes the tool `which-app-on-port` which relies on Node.js child process API `exec` which is an unsafe and vulnerable API if concatenated with untrusted user input. Version 0.0.13 contains a fix
PI `exec` which is an unsafe and vulnerable API if concatenated with untrusted user input. Version 0.0.13 contains a fix for the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/akoskm/create-mcp-server-stdio/security/advisories/GHSA-3ch2-jxxc-v4xf - https://github.com/akoskm/create-mcp-server-stdio/commit/48c26bbe1f8c62764e4592f33c8300d1cadd2eac - https://github.com/akoskm/create-mcp-server-stdio/blob/main/src/index.ts#L24-L40
CVE ID: CVE-2025-54995 State: PUBLISHED Published: 2025-08-28T15:08:04.468Z Last Updated: 2025-11-03T17:45:15.011Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: asterisk Products: asterisk Problem Types: CWE-1286, CWE-400 Description: Asterisk is an open source private branch exchange and telephony toolkit. Prior to versions 18.26.4 and 18.9-cert17, RTP UDP ports and internal resources can leak due to a lack of session termination. This could result in leaks and resource exhaustion. This issue has been patched in versions 18.26.4 and 18.9-cert17. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/as
-cert17. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/asterisk/asterisk/security/advisories/GHSA-557q-795j-wfx2 - https://github.com/asterisk/asterisk/pull/1405 - https://github.com/asterisk/asterisk/pull/1406 - https://github.com/asterisk/asterisk/commit/0278f5bde14565c6838a6ec39bc21aee0cde56a9 - https://github.com/asterisk/asterisk/commit/eafcd7a451dcd007dddf324ac37dd55a4808338d
CVE ID: CVE-2025-54996 State: PUBLISHED Published: 2025-08-09T01:32:09.953Z Last Updated: 2025-08-11T13:53:47.409Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: openbao Products: openbao Problem Types: CWE-269 Description: OpenBao exists to provide a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys. In versions 2.3.1 and below, accounts with access to highly-privileged identity entity systems in root namespaces were able to increase their scope directly to the root policy. While the identity system allowed adding arbitrary policies, which in turn could contain capability grants on arbitrary paths, th
identity system allowed adding arbitrary policies, which in turn could contain capability grants on arbitrary paths, the root policy was restricted to manual generation using unseal or recovery key shares. The global root policy was not accessible from child namespaces. This issue is fixed in version 2.3.2. To workaround this vulnerability, use of denied_parameters in any policy which has access to the affected identity endpoints (on identity entities) may be sufficient to prohibit this type of attack. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/openbao/openbao/security/advisories/GHSA-vf84-mxrq-crqc - https://github.com/openbao/openbao/pull/1627 - ht
//github.com/openbao/openbao/security/advisories/GHSA-vf84-mxrq-crqc - https://github.com/openbao/openbao/pull/1627 - https://github.com/openbao/openbao/releases/tag/v2.3.2
CVE ID: CVE-2025-54997 State: PUBLISHED Published: 2025-08-09T01:56:45.634Z Last Updated: 2025-08-11T13:56:43.049Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: openbao Products: openbao Problem Types: CWE-94 Description: OpenBao exists to provide a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys. In versions 2.3.1 and below, some OpenBao deployments intentionally limit privileged API operators from executing system code or making network connections. However, these operators can bypass both restrictions through the audit subsystem by manipulating log prefixes. This allows unauthorized code exec
an bypass both restrictions through the audit subsystem by manipulating log prefixes. This allows unauthorized code execution and network access that violates the intended security model. This issue is fixed in version 2.3.2. To workaround, users can block access to sys/audit/* endpoints using explicit deny policies, but root operators cannot be restricted this way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/openbao/openbao/security/advisories/GHSA-xp75-r577-cvhp - https://github.com/openbao/openbao/pull/1634 - https://discuss.hashicorp.com/t/hcsec-2025-14-privileged-vault-operator-may-execute-code-on-the-underlying-host/76033 - https://github.com/ope
orp.com/t/hcsec-2025-14-privileged-vault-operator-may-execute-code-on-the-underlying-host/76033 - https://github.com/openbao/openbao/releases/tag/v2.3.2
CVE ID: CVE-2025-54998 State: PUBLISHED Published: 2025-08-09T02:00:27.597Z Last Updated: 2025-08-11T14:38:33.591Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: openbao Products: openbao Problem Types: CWE-307 Description: OpenBao exists to provide a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys. In versions 0.1.0 through 2.3.1, attackers could bypass the automatic user lockout mechanisms in the OpenBao Userpass or LDAP auth systems. This was caused by different aliasing between pre-flight and full login request user entity alias attributions. This is fixed in version 2.3.2. To work around this
n pre-flight and full login request user entity alias attributions. This is fixed in version 2.3.2. To work around this issue, existing users may apply rate-limiting quotas on the authentication endpoints:, see https://openbao.org/api-docs/system/rate-limit-quotas/. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/openbao/openbao/security/advisories/GHSA-j3xv-7fxp-gfhx - https://github.com/openbao/openbao/commit/c52795c1ef746c7f2c510f9225aa8ccbbd44f9fc - https://discuss.hashicorp.com/t/hcsec-2025-16-vault-userpass-and-ldap-user-lockout-bypass/76035
CVE ID: CVE-2025-54999 State: PUBLISHED Published: 2025-08-09T02:00:46.271Z Last Updated: 2025-08-11T14:40:29.456Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: openbao Products: openbao Problem Types: CWE-203 Description: OpenBao exists to provide a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys. In versions 0.1.0 through 2.3.1, when using OpenBao's userpass auth method, user enumeration was possible due to timing difference between non-existent users and users with stored credentials. This is independent of whether the supplied credentials were valid for the given user. This issue was fixed in ver
ials. This is independent of whether the supplied credentials were valid for the given user. This issue was fixed in version 2.3.2. To work around this issue, users may use another auth method or apply rate limiting quotas to limit the number of requests in a period of time: https://openbao.org/api-docs/system/rate-limit-quotas/. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/openbao/openbao/security/advisories/GHSA-hh28-h22f-8357 - https://github.com/openbao/openbao/commit/4d9b5d3d6486ab9fbd5b644173fa0097015d6626 - https://discuss.hashicorp.com/t/hcsec-2025-15-timing-side-channel-in-vault-s-userpass-auth-method/76034 - https://discuss.hashicorp.com/t/hcs
corp.com/t/hcsec-2025-15-timing-side-channel-in-vault-s-userpass-auth-method/76034 - https://discuss.hashicorp.com/t/hcsec-2025-21-vault-user-enumeration-in-userpass-auth-method/76095
CVE ID: CVE-2025-55000 State: PUBLISHED Published: 2025-08-09T02:01:16.409Z Last Updated: 2025-08-11T14:43:10.004Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: openbao Products: openbao Problem Types: CWE-156 Description: OpenBao exists to provide a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys. In versions 0.1.0 through 2.3.1, OpenBao's TOTP secrets engine could accept valid codes multiple times rather than strictly-once. This was caused by unexpected normalization in the underlying TOTP library. To work around, ensure that all codes are first normalized before submitting to the OpenBao endpoi
erlying TOTP library. To work around, ensure that all codes are first normalized before submitting to the OpenBao endpoint. TOTP code verification is a privileged action; only trusted systems should be verifying codes. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/openbao/openbao/security/advisories/GHSA-f7c3-mhj2-9pvg - https://github.com/openbao/openbao/commit/183891f8d535d5b6eb3d79fda8200cade6de99e1 - https://discuss.hashicorp.com/t/hcsec-2025-17-vault-totp-secrets-engine-code-reuse/76036
CVE ID: CVE-2025-55001 State: PUBLISHED Published: 2025-08-09T02:01:29.056Z Last Updated: 2025-08-11T14:45:37.326Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N) Vendors: openbao Products: openbao Problem Types: CWE-156 Description: OpenBao exists to provide a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys. In versions 2.3.1 and below, OpenBao allowed the assignment of policies and MFA attribution based upon entity aliases, chosen by the underlying auth method. When the username_as_alias=true parameter in the LDAP auth method was in use, the caller-supplied username was used verbatim without normalization,
true parameter in the LDAP auth method was in use, the caller-supplied username was used verbatim without normalization, allowing an attacker to bypass alias-specific MFA requirements. This issue was fixed in version 2.3.2. To work around this, remove all usage of the username_as_alias=true parameter and update any entity aliases accordingly. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/openbao/openbao/security/advisories/GHSA-2q8q-8fgw-9p6p - https://github.com/openbao/openbao/commit/c52795c1ef746c7f2c510f9225aa8ccbbd44f9fc - https://discuss.hashicorp.com/t/hcsec-2025-20-vault-ldap-mfa-enforcement-bypass-when-using-username-as-alias/76092
CVE ID: CVE-2025-55003 State: PUBLISHED Published: 2025-08-09T02:01:43.985Z Last Updated: 2025-08-11T14:47:04.206Z Severity: MEDIUM (CVSS 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N) Vendors: openbao Products: openbao Problem Types: CWE-307 Description: OpenBao exists to provide a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys. In versions 2.3.1 and below, OpenBao's Login Multi-Factor Authentication (MFA) system allows enforcing MFA using Time-based One Time Password (TOTP). Due to normalization applied by the underlying TOTP library, codes were accepted which could contain whitespace; this whitespace could bypass internal rat
e underlying TOTP library, codes were accepted which could contain whitespace; this whitespace could bypass internal rate limiting of the MFA method and allow reuse of existing MFA codes. This issue was fixed in version 2.3.2. To work around this, use of rate-limiting quotas can limit an attacker's ability to exploit this: https://openbao.org/api-docs/system/rate-limit-quotas/. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/openbao/openbao/security/advisories/GHSA-rxp7-9q75-vj3p - https://github.com/openbao/openbao/commit/8340a6918f6c41d8f75b6c3845c376d9dc32ed19 - https://discuss.hashicorp.com/t/hcsec-2025-19-vault-login-mfa-bypass-of-rate-limiting-and-to
8f75b6c3845c376d9dc32ed19 - https://discuss.hashicorp.com/t/hcsec-2025-19-vault-login-mfa-bypass-of-rate-limiting-and-totp-token-reuse/76038
CVE ID: CVE-2025-55004 State: PUBLISHED Published: 2025-08-13T13:59:23.354Z Last Updated: 2025-08-13T14:35:59.815Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L) Vendors: ImageMagick Products: ImageMagick Problem Types: CWE-122 Description: ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-1, ImageMagick is vulnerable to heap-buffer overflow read around the handling of images with separate alpha channels when performing image magnification in ReadOneMNGIMage. This can likely be used to leak subsequent memory contents into the output image. This issue has been patched in version 7.1.2-1. Additional Ana
to leak subsequent memory contents into the output image. This issue has been patched in version 7.1.2-1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-cjc8-g9w8-chfw - https://goo.gle/bigsleep
CVE ID: CVE-2025-55005 State: PUBLISHED Published: 2025-08-13T13:59:50.155Z Last Updated: 2025-08-13T14:34:24.677Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) Vendors: ImageMagick Products: ImageMagick Problem Types: CWE-122 Description: ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-1, when preparing to transform from Log to sRGB colorspaces, the logmap construction fails to handle cases where the reference-black or reference-white value is larger than 1024. This leads to corrupting memory beyond the end of the allocated logmap buffer. This issue has been patched in version 7.1.2-1. Additiona
rrupting memory beyond the end of the allocated logmap buffer. This issue has been patched in version 7.1.2-1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-v393-38qx-v8fp - https://goo.gle/bigsleep
CVE ID: CVE-2025-55006 State: PUBLISHED Published: 2025-08-09T02:01:57.136Z Last Updated: 2025-08-11T14:49:39.107Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L) Vendors: frappe Products: lms Problem Types: CWE-20 Description: Frappe Learning is a learning system that helps users structure their content. In versions 2.33.0 and below, the image upload functionality did not adequately sanitize uploaded SVG files. This allowed users to upload SVG files containing embedded JavaScript or other potentially malicious content. Malicious SVG files could be used to execute arbitrary scripts in the context of other users. A fix for this issue is planned for version 2.34.0. Add
used to execute arbitrary scripts in the context of other users. A fix for this issue is planned for version 2.34.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/frappe/lms/security/advisories/GHSA-mvxw-r9x4-3vrr
CVE ID: CVE-2025-55007 State: PUBLISHED Published: 2025-09-01T15:46:04.915Z Last Updated: 2025-09-02T18:15:03.646Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N) Vendors: KnowageLabs Products: Knowage-Server Problem Types: CWE-918 Description: Knowage is an open source analytics and business intelligence suite. Prior to version 8.1.37, Knowage is vulnerable to server-side request forgery. The vulnerability allows attackers to send requests to arbitrary hosts/paths. Since the attacker is not able to read the response, the impact of this vulnerability is limited. However, an attacker could be able to leverage this vulnerability to scan the internal network. This issue ha
s limited. However, an attacker could be able to leverage this vulnerability to scan the internal network. This issue has been patched in version 8.1.37. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/KnowageLabs/Knowage-Server/security/advisories/GHSA-7f6m-ph57-52w6
CVE ID: CVE-2025-55008 State: PUBLISHED Published: 2025-08-09T02:02:14.950Z Last Updated: 2025-08-11T14:33:33.678Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L) Vendors: workos Products: authkit-react-router Problem Types: CWE-200 Description: The AuthKit library for React Router 7+ provides helpers for authentication and session management using WorkOS & AuthKit with React Router. In versions 0.6.1 and below, @workos-inc/authkit-react-router exposed sensitive authentication artifacts — specifically sealedSession and accessToken by returning them from the authkitLoader. This caused them to be rendered into the browser HTML. This issue is fixed in version 0.7.0. Addit
om the authkitLoader. This caused them to be rendered into the browser HTML. This issue is fixed in version 0.7.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/workos/authkit-react-router/security/advisories/GHSA-vqvc-9q8x-vmq6 - https://github.com/workos/authkit-react-router/commit/607caac658784962bab76e227f9c5820d0b9a9e5 - https://github.com/workos/authkit-react-router/releases/tag/v0.7.0
CVE ID: CVE-2025-55009 State: PUBLISHED Published: 2025-08-09T02:02:07.611Z Last Updated: 2025-08-11T14:35:52.345Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L) Vendors: workos Products: authkit-remix Problem Types: CWE-200 Description: The AuthKit library for Remix provides convenient helpers for authentication and session management using WorkOS & AuthKit with Remix. In versions 0.14.1 and below, @workos-inc/authkit-remix exposed sensitive authentication artifacts — specifically sealedSession and accessToken — by returning them from the authkitLoader. This caused them to be rendered into the browser HTML. Additional Analyst Notes: - CISA ADP Vulnrichment: Reference
der. This caused them to be rendered into the browser HTML. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/workos/authkit-remix/security/advisories/GHSA-v3gr-w9gf-23cx - https://github.com/workos/authkit-remix/commit/20102afc74bf3dd5150a975a098067fb406b90b6 - https://github.com/workos/authkit-remix/releases/tag/v0.15.0
CVE ID: CVE-2025-55010 State: PUBLISHED Published: 2025-08-12T15:57:13.343Z Last Updated: 2025-08-12T16:24:36.343Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: kanboard Products: kanboard Problem Types: CWE-502 Description: Kanboard is project management software that focuses on the Kanban methodology. Prior to version 1.2.47, an unsafe deserialization vulnerability in the ProjectEventActvityFormatter allows admin users the ability to instantiate arbitrary php objects by modifying the event["data"] field in the project_activities table. A malicious actor can update this field to use a php gadget to write a web shell into the /plugins folder, which then
. A malicious actor can update this field to use a php gadget to write a web shell into the /plugins folder, which then gives remote code execution on the host system. This issue has been patched in version 1.2.47. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/kanboard/kanboard/security/advisories/GHSA-359x-c69j-q64r - https://github.com/kanboard/kanboard/commit/7148ac092e5db6b33e0fc35e04bca328d96c1f6f - https://github.com/kanboard/kanboard/blob/b033c0e0f982f8158e240bce8ab54c29727f8efe/app/Formatter/ProjectActivityEventFormatter.php#L43-L57
CVE ID: CVE-2025-55011 State: PUBLISHED Published: 2025-08-12T15:57:08.108Z Last Updated: 2025-08-12T19:31:01.757Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: kanboard Products: kanboard Problem Types: CWE-22 Description: Kanboard is project management software that focuses on the Kanban methodology. Prior to version 1.2.47, the createTaskFile method in the API does not validate whether the task_id parameter is a valid task id, nor does it check for path traversal. As a result, a malicious actor could write a file anywhere on the system the app user controls. The impact is limited due to the filename being hashed and having no extension. This issue has b
the app user controls. The impact is limited due to the filename being hashed and having no extension. This issue has been patched in version 1.2.47. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/kanboard/kanboard/security/advisories/GHSA-26f4-rx96-xc55 - https://github.com/kanboard/kanboard/commit/523a6135e944b6884c091a3fd7605af8ef133681 - https://github.com/kanboard/kanboard/blob/b2e35ac520add67cff792aab960b3c002c48e3d0/app/Api/Procedure/TaskFileProcedure.php#L47-L57
CVE ID: CVE-2025-55012 State: PUBLISHED Published: 2025-08-11T21:25:40.465Z Last Updated: 2025-08-12T15:40:17.885Z Vendors: zed-industries Products: zed Problem Types: CWE-288, CWE-284 Description: Zed is a multiplayer code editor. Prior to version 0.197.3, in the Zed Agent Panel allowed for an AI agent to achieve Remote Code Execution (RCE) by bypassing user permission checks. An AI Agent could have exploited a permissions bypass vulnerability to create or modify a project-specific configuration file, leading to the execution of arbitrary commands on a victim's machine without the explicit approval that would otherwise be required. This vulnerability has been patched in version 0.197.3. A w
hout the explicit approval that would otherwise be required. This vulnerability has been patched in version 0.197.3. A workaround for this issue involves either avoid sending prompts to the Agent Panel, or to limit the AI Agent's file system access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/zed-industries/zed/security/advisories/GHSA-x34m-39xw-g2wr
CVE ID: CVE-2025-55013 State: PUBLISHED Published: 2025-08-09T02:02:23.602Z Last Updated: 2025-08-12T13:26:26.900Z Severity: MEDIUM (CVSS 4.2 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: CybercentreCanada Products: assemblyline Problem Types: CWE-23 Description: The Assemblyline 4 Service Client interfaces with the API to fetch tasks and publish the result for a service in Assemblyline 4. In versions below 4.6.1.dev138, the Assemblyline 4 Service Client (task_handler.py) accepts a SHA-256 value returned by the service server and uses it directly as a local file name.A malicious or compromised server (or any MITM that can speak to client) can return a path-traversal payload such as
me.A malicious or compromised server (or any MITM that can speak to client) can return a path-traversal payload such as `../../../etc/cron.d/evil` and force the client to write the downloaded bytes to an arbitrary location on disk. This is fixed in version 4.6.1.dev138. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/CybercentreCanada/assemblyline/security/advisories/GHSA-75jv-vfxf-3865 - https://github.com/CybercentreCanada/assemblyline-service-client/commit/351414e7e96cc1f5640ae71ae51b939e8ba30900
CVE ID: CVE-2025-55014 State: PUBLISHED Published: 2025-08-04T00:00:00.000Z Last Updated: 2025-11-04T21:12:59.566Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N) Vendors: StarDict Products: StarDict Problem Types: CWE-402 Description: The YouDao plugin for StarDict, as used in stardict 3.0.7+git20220909+dfsg-6 in Debian trixie and elsewhere, sends an X11 selection to the dict.youdao.com and dict.cn servers via cleartext HTTP. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.openwall.com/lists/oss-security/2025/08/04/1 - https://lists.debian.org/debian-user/2025/08/msg00076.html - https://packages.debian.org/trixie
-security/2025/08/04/1 - https://lists.debian.org/debian-user/2025/08/msg00076.html - https://packages.debian.org/trixie/stardict - https://packages.debian.org/trixie/stardict-gtk - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1110370 - https://stardict-4.sourceforge.net/index_en.php