Skip to content

Commit 52a9a62

Browse files
advisory-database[bot]advisory-database[bot]
committed
Publish Advisories
GHSA-m68q-4hqr-mc6f GHSA-gj84-8vfx-q3vm GHSA-pvmm-7c2r-wmp4 GHSA-3f58-3q4v-mmv6 GHSA-43w7-m975-rc6f GHSA-5g8w-c37j-h97f GHSA-6v2x-53rq-w964 GHSA-c572-6jcr-v7gg GHSA-fjj2-x466-w3hx GHSA-g654-7x6w-89mj GHSA-gwp9-mvfw-8j7p GHSA-h2vc-rgmf-cp34 GHSA-j8j9-23cp-fr5v GHSA-j9w8-4m8f-75m4 GHSA-jpv6-5xvq-8ghh GHSA-m766-xfqm-qm37 GHSA-mp63-3qcj-f8c7 GHSA-p9w7-rqj5-fjh5 GHSA-pr3g-4gg4-m5r6 GHSA-qwjm-wxc7-52cc GHSA-r84m-wqx8-5c88 GHSA-x64m-ffg4-mr74
1 parent 7940434 commit 52a9a62

File tree

22 files changed

+668
-3
lines changed

22 files changed

+668
-3
lines changed

‎advisories/github-reviewed/2025/09/GHSA-m68q-4hqr-mc6f/GHSA-m68q-4hqr-mc6f.json‎

Lines changed: 9 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-m68q-4hqr-mc6f",
4-
"modified": "2025-12-05T21:30:21Z",
4+
"modified": "2025-12-11T06:30:24Z",
55
"published": "2025-09-16T15:32:37Z",
66
"aliases": [
77
"CVE-2025-4953"
@@ -72,6 +72,14 @@
7272
"type": "WEB",
7373
"url": "https://access.redhat.com/errata/RHSA-2025:22275"
7474
},
75+
{
76+
"type": "WEB",
77+
"url": "https://access.redhat.com/errata/RHSA-2025:22695"
78+
},
79+
{
80+
"type": "WEB",
81+
"url": "https://access.redhat.com/errata/RHSA-2025:22724"
82+
},
7583
{
7684
"type": "WEB",
7785
"url": "https://access.redhat.com/errata/RHSA-2025:2703"

‎advisories/unreviewed/2025/10/GHSA-gj84-8vfx-q3vm/GHSA-gj84-8vfx-q3vm.json‎

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-gj84-8vfx-q3vm",
4-
"modified": "2025-12-03T18:30:21Z",
4+
"modified": "2025-12-11T06:30:24Z",
55
"published": "2025-10-09T15:31:03Z",
66
"aliases": [
77
"CVE-2025-11561"
@@ -31,6 +31,10 @@
3131
"type": "WEB",
3232
"url": "https://access.redhat.com/security/cve/CVE-2025-11561"
3333
},
34+
{
35+
"type": "WEB",
36+
"url": "https://access.redhat.com/errata/RHSA-2025:22724"
37+
},
3438
{
3539
"type": "WEB",
3640
"url": "https://access.redhat.com/errata/RHSA-2025:22548"

‎advisories/unreviewed/2025/10/GHSA-pvmm-7c2r-wmp4/GHSA-pvmm-7c2r-wmp4.json‎

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-pvmm-7c2r-wmp4",
4-
"modified": "2025-10-15T21:31:40Z",
4+
"modified": "2025-12-11T06:30:24Z",
55
"published": "2025-10-15T21:31:40Z",
66
"aliases": [
77
"CVE-2025-11568"
@@ -19,6 +19,10 @@
1919
"type": "ADVISORY",
2020
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-11568"
2121
},
22+
{
23+
"type": "WEB",
24+
"url": "https://access.redhat.com/errata/RHSA-2025:23086"
25+
},
2226
{
2327
"type": "WEB",
2428
"url": "https://access.redhat.com/security/cve/CVE-2025-11568"

‎advisories/unreviewed/2025/12/GHSA-3f58-3q4v-mmv6/GHSA-3f58-3q4v-mmv6.json‎

Lines changed: 25 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,25 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-3f58-3q4v-mmv6",
4+
"modified": "2025-12-11T06:30:24Z",
5+
"published": "2025-12-11T06:30:24Z",
6+
"aliases": [
7+
"CVE-2025-67693"
8+
],
9+
"details": "Rejected reason: Not used",
10+
"severity": [],
11+
"affected": [],
12+
"references": [
13+
{
14+
"type": "ADVISORY",
15+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-67693"
16+
}
17+
],
18+
"database_specific": {
19+
"cwe_ids": [],
20+
"severity": null,
21+
"github_reviewed": false,
22+
"github_reviewed_at": null,
23+
"nvd_published_at": "2025-12-11T04:15:59Z"
24+
}
25+
}

‎advisories/unreviewed/2025/12/GHSA-43w7-m975-rc6f/GHSA-43w7-m975-rc6f.json‎

Lines changed: 25 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,25 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-43w7-m975-rc6f",
4+
"modified": "2025-12-11T06:30:24Z",
5+
"published": "2025-12-11T06:30:24Z",
6+
"aliases": [
7+
"CVE-2025-67692"
8+
],
9+
"details": "Rejected reason: Not used",
10+
"severity": [],
11+
"affected": [],
12+
"references": [
13+
{
14+
"type": "ADVISORY",
15+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-67692"
16+
}
17+
],
18+
"database_specific": {
19+
"cwe_ids": [],
20+
"severity": null,
21+
"github_reviewed": false,
22+
"github_reviewed_at": null,
23+
"nvd_published_at": "2025-12-11T04:15:59Z"
24+
}
25+
}

‎advisories/unreviewed/2025/12/GHSA-5g8w-c37j-h97f/GHSA-5g8w-c37j-h97f.json‎

Lines changed: 25 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,25 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-5g8w-c37j-h97f",
4+
"modified": "2025-12-11T06:30:24Z",
5+
"published": "2025-12-11T06:30:24Z",
6+
"aliases": [
7+
"CVE-2025-67686"
8+
],
9+
"details": "Rejected reason: Not used",
10+
"severity": [],
11+
"affected": [],
12+
"references": [
13+
{
14+
"type": "ADVISORY",
15+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-67686"
16+
}
17+
],
18+
"database_specific": {
19+
"cwe_ids": [],
20+
"severity": null,
21+
"github_reviewed": false,
22+
"github_reviewed_at": null,
23+
"nvd_published_at": "2025-12-11T04:15:59Z"
24+
}
25+
}

‎advisories/unreviewed/2025/12/GHSA-6v2x-53rq-w964/GHSA-6v2x-53rq-w964.json‎

Lines changed: 44 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,44 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-6v2x-53rq-w964",
4+
"modified": "2025-12-11T06:30:24Z",
5+
"published": "2025-12-11T06:30:24Z",
6+
"aliases": [
7+
"CVE-2025-12716"
8+
],
9+
"details": "GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.4 before 18.4.6, 18.5 before 18.5.4, and 18.6 before 18.6.2 that, under certain conditions could have allowed an authenticated user to perform unauthorized actions on behalf of another user by creating wiki pages with malicious content.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-12716"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://hackerone.com/reports/3405832"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://about.gitlab.com/releases/2025/12/10/patch-release-gitlab-18-6-2-released"
29+
},
30+
{
31+
"type": "WEB",
32+
"url": "https://gitlab.com/gitlab-org/gitlab/-/issues/579548"
33+
}
34+
],
35+
"database_specific": {
36+
"cwe_ids": [
37+
"CWE-79"
38+
],
39+
"severity": "HIGH",
40+
"github_reviewed": false,
41+
"github_reviewed_at": null,
42+
"nvd_published_at": "2025-12-11T04:15:58Z"
43+
}
44+
}

‎advisories/unreviewed/2025/12/GHSA-c572-6jcr-v7gg/GHSA-c572-6jcr-v7gg.json‎

Lines changed: 25 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,25 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-c572-6jcr-v7gg",
4+
"modified": "2025-12-11T06:30:24Z",
5+
"published": "2025-12-11T06:30:24Z",
6+
"aliases": [
7+
"CVE-2025-67691"
8+
],
9+
"details": "Rejected reason: Not used",
10+
"severity": [],
11+
"affected": [],
12+
"references": [
13+
{
14+
"type": "ADVISORY",
15+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-67691"
16+
}
17+
],
18+
"database_specific": {
19+
"cwe_ids": [],
20+
"severity": null,
21+
"github_reviewed": false,
22+
"github_reviewed_at": null,
23+
"nvd_published_at": "2025-12-11T04:15:59Z"
24+
}
25+
}

‎advisories/unreviewed/2025/12/GHSA-fjj2-x466-w3hx/GHSA-fjj2-x466-w3hx.json‎

Lines changed: 44 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,44 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-fjj2-x466-w3hx",
4+
"modified": "2025-12-11T06:30:24Z",
5+
"published": "2025-12-11T06:30:24Z",
6+
"aliases": [
7+
"CVE-2025-8405"
8+
],
9+
"details": "GitLab has remediated a security issue in GitLab CE/EE affecting all versions from 17.1 before 18.4.6, 18.5 before 18.5.4, and 18.6 before 18.6.2 that could have allowed an authenticated user to perform unauthorized actions on behalf of other users by injecting malicious HTML into vulnerability code flow displays.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-8405"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://hackerone.com/reports/3270940"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://about.gitlab.com/releases/2025/12/10/patch-release-gitlab-18-6-2-released"
29+
},
30+
{
31+
"type": "WEB",
32+
"url": "https://gitlab.com/gitlab-org/gitlab/-/issues/558214"
33+
}
34+
],
35+
"database_specific": {
36+
"cwe_ids": [
37+
"CWE-116"
38+
],
39+
"severity": "HIGH",
40+
"github_reviewed": false,
41+
"github_reviewed_at": null,
42+
"nvd_published_at": "2025-12-11T05:16:38Z"
43+
}
44+
}

‎advisories/unreviewed/2025/12/GHSA-g654-7x6w-89mj/GHSA-g654-7x6w-89mj.json‎

Lines changed: 25 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,25 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-g654-7x6w-89mj",
4+
"modified": "2025-12-11T06:30:24Z",
5+
"published": "2025-12-11T06:30:24Z",
6+
"aliases": [
7+
"CVE-2025-67694"
8+
],
9+
"details": "Rejected reason: Not used",
10+
"severity": [],
11+
"affected": [],
12+
"references": [
13+
{
14+
"type": "ADVISORY",
15+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-67694"
16+
}
17+
],
18+
"database_specific": {
19+
"cwe_ids": [],
20+
"severity": null,
21+
"github_reviewed": false,
22+
"github_reviewed_at": null,
23+
"nvd_published_at": "2025-12-11T04:15:59Z"
24+
}
25+
}

0 commit comments

Comments
 (0)