Do Son
TL;DR PHP Composer, the main dependency manager for the language, patched three security flaws. The most serious,...
Arbitrary File Write
TL;DR A high-severity decompress npm vulnerability lets crafted archives write files outside the extraction folder. Tracked as...
TL;DR Apache IoTDB has patched three flaws in its time-series database. The worst is a critical path...
A critical flaw in the Feast Feature Server carries a CVSS score of 9.1. The bug, tracked...
TL;DR A researcher from Hacking Cult published full technical details and proof-of-concept code for three OPNsense firewall...
A Cisco SD-WAN vulnerability is now under active attack, and Cisco is urging customers to patch fast....
In the complex world of Identity and Access Management (IAM), the security of the gateway is paramount....
Roundcube Webmail has released a high-priority security update, version 1.6.14, aimed at patching several significant vulnerabilities that...
Security researchers have identified two severe vulnerabilities in Langflow, the popular visual framework for building AI-powered agents....
Microsoft has issued a critical security advisory for developers using its Semantic Kernel .NET SDK, warning of...
A severe vulnerability has been discovered in ASUSTOR ADM (ASUSTOR Data Master), the operating system that powers...
A critical security vulnerability has been discovered in AdonisJS, a popular full-stack Node.js web framework known for...
Ivanti has rolled out an urgent security update for its Endpoint Manager (EPM) solution, patching a cluster...
In a study titled “TEE.fail: Breaking Trusted Execution Environments via DDR5 Memory Bus Interposition,” researchers from Georgia...
Researchers from Exodus Intelligence, led by Michele Campa, have disclosed a privilege-escalation vulnerability in Microsoft’s Cloud Files...
The Docker Compose project has disclosed a high-severity path traversal vulnerability tracked as CVE-2025-62725 (CVSS v4 8.9),...
Atlassian has released patches addressing a high-severity Path Traversal vulnerability (CVE-2025-22167) affecting Jira Software Data Center and...
The maintainers of Flowise, an open-source generative AI development platform for building AI agents and LLM workflows,...
The open-source DevOps ecosystem has been hit with another critical security issue—this time in Harness Open Source,...
A newly disclosed vulnerability in 7-Zip, tracked as CVE-2025-55188, has been identified by security researcher Landon. The...
The Git Project has released updates addressing three significant vulnerabilities impacting Git versions up to v2.50.0, including...
A newly disclosed vulnerability in Python’s tarfile module—CVE-2025-4517—has exposed a critical security risk that allows attackers to...