Skip to content
Advisories.

All advisories

14,478 advisories for 277 projects, newest first

60 of 3,577 advisories

Advisory
NLTK: server-side request forgery
NLTKHigh8.6Jul 31
Natural Language Toolkit (NLTK): ReDoS in NLTK ReviewsCorpusReader FEATURES regex
NLTKHigh7.5Jul 31
NLTK: arbitrary file read
NLTKHigh7.5Jul 31
NLTK: path traversal
NLTKHigh7.5Jul 31
Adobe Premiere: out-of-bounds write
PremiereHigh7.8Jul 31
Red Hat Ansible Automation Platform 2: improper certificate validation
Red Hat Ansible Automation Platform 2High8.2Jul 31
Red Hat gnome-remote-desktop as shipped: resource exhaustion
gnome-remote-desktop as shippedHigh7.5Jul 31
Incorrect authorization in Strands Agents Tools http_request tool
AWSUnratedJul 31
Stored XSS in Participant URL Field leads to Account Takeover via Session Token Theft
AWSUnratedJul 31
A flaw was found in 389 Directory Server
389 Directory ServerHigh7.5Jul 31
Red Hat: buffer overflow
Red HatHigh7.5Jul 31
Red Hat Advanced Cluster Security 4: insufficient authenticity check
Red Hat Advanced Cluster Security 4High8.5Jul 31
Red Hat SAML protocol implementation of Keycloak: improper input validation
SAML protocol implementation of KeycloakLow3.4Jul 31
Red Hat TokenManager: missing authorization
TokenManagerMedium4.2Jul 31
Red Hat group policy evaluation logic of Keycloak: improper authorization
group policy evaluation logic of KeycloakMedium6.5Jul 31
Red Hat keycloak-services: improper input validation
keycloak-servicesLow3.7Jul 31
Red Hat Build of Keycloak: information disclosure
Red Hat Build of KeycloakMedium6.5Jul 31
Red Hat keycloak-services: session fixation
keycloak-servicesLow3.4Jul 31
Red Hat Build of: attacker could intercept sensitive authentication codes
Red Hat Build of KeycloakMedium4.2Jul 31
Red Hat Data Grid 8: missing authorization
Red Hat Data Grid 8Medium6.8Jul 31
Red Hat Data Grid 8: improper authentication
Red Hat Data Grid 8Medium6.8Jul 31
Red Hat RoleContainerResource: insecure direct object reference
RoleContainerResourceMedium4.9Jul 31
Red Hat yggdrasil-worker-package-manager: argument injection
yggdrasil-worker-package-managerHigh7.8Jul 31
Google mcp-toolbox: authentication bypass
mcp-toolboxHigh8.0Jul 31
Google mcp-toolbox: server-side request forgery
mcp-toolboxHigh8.0Jul 31
Google mcp-toolbox: improper authorization
mcp-toolboxMedium5.7Jul 31
Google mcp-toolbox: denial of service
mcp-toolboxMedium6.6Jul 31
Google mcp-toolbox: improper authorization
mcp-toolboxHigh8.1Jul 31
ansible-collection-redhat-leapp: information disclosure
ansible-collection-redhat-leappMedium6.2Jul 30
ansible-collection-redhat-leapp.: insecure permissions
ansible-collection-redhat-leapp.Medium5.5Jul 30
Microsoft Azure Cosmos DB: improper access control
Azure Cosmos DBCritical10.0Jul 30
IBM WebSphere Application Server: remote code execution
WebSphere Application ServerHigh8.5Jul 30
IBM Langflow OSS: code injection
Langflow OSSCritical9.9Jul 30
UCD - IBM: information disclosure
UCD - IBMMedium4.3Jul 30
IBM Langflow OSS: improper input validation
Langflow OSSCritical9.9Jul 30
IBM Langflow OSS: attacker could access another user's private vector
Langflow OSSHigh8.1Jul 30
IBM Langflow OSS: path traversal
Langflow OSSHigh7.5Jul 30
IBM HMC: remote code execution
HMCCritical9.8Jul 30
IBM Security Verify Access: information disclosure
Security Verify AccessMedium5.3Jul 30
IBM webMethods Integration (on prem): remote code execution
webMethods Integration (on prem)Critical9.8Jul 30
IBM DataPower Gateway: denial of service
DataPower GatewayHigh7.5Jul 30
IBM Langflow OSS: improper access control
Langflow OSSMedium6.5Jul 30
IBM Db2: buffer overflow
Db2High8.4Jul 30
IBM Planning Analytics Local: open redirect
Planning Analytics LocalHigh7.5Jul 30
IBM Db2: denial of service
Db2Medium6.2Jul 30
IBM DataPower Gateway: XML external entity
DataPower GatewayMedium5.5Jul 30
IBM Operations Analytics - Log Analysis: insufficient session expiration
Operations Analytics - Log AnalysisMedium6.3Jul 30
IBM Engineering Requirements Management: cross-site scripting
Engineering Requirements Management DOORS and DOORS Web AcceMedium6.1Jul 30
IBM Engineering Requirements Management: denial of service
Engineering Requirements Management DOORS and DOORS Web AcceHigh7.5Jul 30
IBM WebSphere Application Server: denial of service
WebSphere Application ServerHigh7.5Jul 30
IBM Langflow OSS: remote code execution
Langflow OSSCritical9.8Jul 30
IBM Langflow OSS: improper access control
Langflow OSSHigh7.1Jul 30
IBM PowerVM Hypervisor: buffer overflow
PowerVM HypervisorHigh8.4Jul 30
Red Hat Samba: out-of-bounds read
SambaMedium5.3Jul 30
Red Hat Enterprise Linux 10: improper authorization
Red Hat Enterprise Linux 10High8.8Jul 30
SolarWinds Web Help Desk: authentication bypass
Web Help DeskCritical9.8Jul 30
IBM WebSphere Application Server: remote attacker could bypass security...
WebSphere Application ServerHigh7.5Jul 30
IBM WebSphere Application Server - Liberty: cross-site request forgery
WebSphere Application Server - LibertyHigh8.3Jul 30
IBM App Connect Enterprise: path traversal
App Connect EnterpriseCritical9.8Jul 30
IBM Enterprise Build of Quarkus: denial of service
Enterprise Build of QuarkusHigh7.5Jul 30

Critical advisories by email

Wednesdays: the week’s critical and high advisories in the AI and data stack, with the fixed versions. Only in weeks that have some.

Double opt-in. Unsubscribe any time.