Skip to content

Commit eb17559

Browse files
advisory-database[bot]advisory-database[bot]
committed
Publish Advisories
GHSA-wp3j-xq48-xpjw GHSA-vmmw-985w-hrr3 GHSA-hrx4-rccm-xj6c GHSA-57cc-2pf4-mhmx GHSA-63ww-623p-2ph4 GHSA-89wr-3g6x-pxxx GHSA-c6rr-xhrp-94pr GHSA-c99q-x737-hc5j GHSA-cgjg-p2m2-qm4p GHSA-ggg6-jj2q-72rr GHSA-gj3h-r32m-qjhw GHSA-gjx5-j34g-5g5p GHSA-jwv5-943c-f5wh GHSA-m657-v3w3-jr64 GHSA-qjmh-gf3w-643f GHSA-rg64-8mrm-6x23 GHSA-whpx-mf6c-fq99
1 parent aa91897 commit eb17559

File tree

17 files changed

+613
-3
lines changed

17 files changed

+613
-3
lines changed

‎advisories/github-reviewed/2025/09/GHSA-wp3j-xq48-xpjw/GHSA-wp3j-xq48-xpjw.json‎

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-wp3j-xq48-xpjw",
4-
"modified": "2026-02-16T09:30:30Z",
4+
"modified": "2026-02-16T15:32:47Z",
55
"published": "2025-09-04T20:01:54Z",
66
"aliases": [
77
"CVE-2025-9566"
@@ -166,6 +166,10 @@
166166
"type": "WEB",
167167
"url": "https://access.redhat.com/errata/RHEA-2025:4782"
168168
},
169+
{
170+
"type": "WEB",
171+
"url": "https://access.redhat.com/errata/RHBA-2025:16163"
172+
},
169173
{
170174
"type": "WEB",
171175
"url": "https://access.redhat.com/errata/RHBA-2025:16158"

‎advisories/unreviewed/2023/03/GHSA-vmmw-985w-hrr3/GHSA-vmmw-985w-hrr3.json‎

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-vmmw-985w-hrr3",
4-
"modified": "2023-03-11T03:30:17Z",
4+
"modified": "2026-02-16T15:32:47Z",
55
"published": "2023-03-07T00:30:24Z",
66
"aliases": [
77
"CVE-2023-1211"
@@ -23,6 +23,10 @@
2323
"type": "WEB",
2424
"url": "https://github.com/phpipam/phpipam/commit/16e7a94fb69412e569ccf6f2fe0a1f847309c922"
2525
},
26+
{
27+
"type": "WEB",
28+
"url": "https://github.com/MarkLee131/awesome-web-pocs/blob/main/CVE-2023-1211.md"
29+
},
2630
{
2731
"type": "WEB",
2832
"url": "https://huntr.dev/bounties/ed569124-2aeb-4b0d-a312-435460892afd"

‎advisories/unreviewed/2025/12/GHSA-hrx4-rccm-xj6c/GHSA-hrx4-rccm-xj6c.json‎

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-hrx4-rccm-xj6c",
4-
"modified": "2026-02-11T15:30:21Z",
4+
"modified": "2026-02-16T15:32:47Z",
55
"published": "2025-12-05T18:31:11Z",
66
"aliases": [
77
"CVE-2025-14104"
@@ -39,6 +39,10 @@
3939
"type": "WEB",
4040
"url": "https://access.redhat.com/errata/RHSA-2026:2563"
4141
},
42+
{
43+
"type": "WEB",
44+
"url": "https://access.redhat.com/errata/RHSA-2026:2737"
45+
},
4246
{
4347
"type": "WEB",
4448
"url": "https://access.redhat.com/security/cve/CVE-2025-14104"

‎advisories/unreviewed/2026/02/GHSA-57cc-2pf4-mhmx/GHSA-57cc-2pf4-mhmx.json‎

Lines changed: 36 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,36 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-57cc-2pf4-mhmx",
4+
"modified": "2026-02-16T15:32:47Z",
5+
"published": "2026-02-16T15:32:47Z",
6+
"aliases": [
7+
"CVE-2025-14350"
8+
],
9+
"details": "Mattermost versions 11.1.x <= 11.1.2, 10.11.x <= 10.11.9, 11.2.x <= 11.2.1 fail to properly validate team membership when processing channel mentions which allows authenticated users to determine the existence of teams and their URL names via posting channel shortlinks and observing the channel_mentions property in the API response. Mattermost Advisory ID: MMSA-2025-00563",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-14350"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://mattermost.com/security-updates"
25+
}
26+
],
27+
"database_specific": {
28+
"cwe_ids": [
29+
"CWE-862"
30+
],
31+
"severity": "MODERATE",
32+
"github_reviewed": false,
33+
"github_reviewed_at": null,
34+
"nvd_published_at": "2026-02-16T13:15:59Z"
35+
}
36+
}

‎advisories/unreviewed/2026/02/GHSA-63ww-623p-2ph4/GHSA-63ww-623p-2ph4.json‎

Lines changed: 36 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,36 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-63ww-623p-2ph4",
4+
"modified": "2026-02-16T15:32:47Z",
5+
"published": "2026-02-16T15:32:47Z",
6+
"aliases": [
7+
"CVE-2026-1334"
8+
],
9+
"details": "An Out-Of-Bounds Read vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Release SOLIDWORKS Desktop 2025 through Release SOLIDWORKS Desktop 2026 could allow an attacker to execute arbitrary code while opening a specially crafted EPRT file.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-1334"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://www.3ds.com/trust-center/security/security-advisories/cve-2026-1334"
25+
}
26+
],
27+
"database_specific": {
28+
"cwe_ids": [
29+
"CWE-125"
30+
],
31+
"severity": "HIGH",
32+
"github_reviewed": false,
33+
"github_reviewed_at": null,
34+
"nvd_published_at": "2026-02-16T14:16:18Z"
35+
}
36+
}

‎advisories/unreviewed/2026/02/GHSA-89wr-3g6x-pxxx/GHSA-89wr-3g6x-pxxx.json‎

Lines changed: 52 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,52 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-89wr-3g6x-pxxx",
4+
"modified": "2026-02-16T15:32:47Z",
5+
"published": "2026-02-16T15:32:47Z",
6+
"aliases": [
7+
"CVE-2026-2556"
8+
],
9+
"details": "A security vulnerability has been detected in cskefu up to 8.0.1. This issue affects some unknown processing of the file com/cskefu/cc/controller/resource/MediaController.java of the component Endpoint. The manipulation of the argument url leads to server-side request forgery. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
14+
},
15+
{
16+
"type": "CVSS_V4",
17+
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
18+
}
19+
],
20+
"affected": [],
21+
"references": [
22+
{
23+
"type": "ADVISORY",
24+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-2556"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://fx4tqqfvdw4.feishu.cn/docx/Vrs6dRx79ondtCxldz2cvupdnMe"
29+
},
30+
{
31+
"type": "WEB",
32+
"url": "https://vuldb.com/?ctiid.346164"
33+
},
34+
{
35+
"type": "WEB",
36+
"url": "https://vuldb.com/?id.346164"
37+
},
38+
{
39+
"type": "WEB",
40+
"url": "https://vuldb.com/?submit.750708"
41+
}
42+
],
43+
"database_specific": {
44+
"cwe_ids": [
45+
"CWE-918"
46+
],
47+
"severity": "MODERATE",
48+
"github_reviewed": false,
49+
"github_reviewed_at": null,
50+
"nvd_published_at": "2026-02-16T13:16:00Z"
51+
}
52+
}

‎advisories/unreviewed/2026/02/GHSA-c6rr-xhrp-94pr/GHSA-c6rr-xhrp-94pr.json‎

Lines changed: 50 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,50 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-c6rr-xhrp-94pr",
4+
"modified": "2026-02-16T15:32:47Z",
5+
"published": "2026-02-16T15:32:47Z",
6+
"aliases": [
7+
"CVE-2026-2562"
8+
],
9+
"details": "A vulnerability was determined in JingDong JD Cloud Box AX6600 up to 4.5.1.r4533. This impacts the function cast_streen of the file /jdcapi of the component jdcweb_rpc. Executing a manipulation of the argument File can lead to Remote Privilege Escalation. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
14+
},
15+
{
16+
"type": "CVSS_V4",
17+
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
18+
}
19+
],
20+
"affected": [],
21+
"references": [
22+
{
23+
"type": "ADVISORY",
24+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-2562"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://my.feishu.cn/wiki/Umb6w4PasizunKkagYschZP1nff"
29+
},
30+
{
31+
"type": "WEB",
32+
"url": "https://vuldb.com/?ctiid.346169"
33+
},
34+
{
35+
"type": "WEB",
36+
"url": "https://vuldb.com/?id.346169"
37+
},
38+
{
39+
"type": "WEB",
40+
"url": "https://vuldb.com/?submit.750986"
41+
}
42+
],
43+
"database_specific": {
44+
"cwe_ids": [],
45+
"severity": "MODERATE",
46+
"github_reviewed": false,
47+
"github_reviewed_at": null,
48+
"nvd_published_at": "2026-02-16T15:18:35Z"
49+
}
50+
}

‎advisories/unreviewed/2026/02/GHSA-c99q-x737-hc5j/GHSA-c99q-x737-hc5j.json‎

Lines changed: 33 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,33 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-c99q-x737-hc5j",
4+
"modified": "2026-02-16T15:32:47Z",
5+
"published": "2026-02-16T15:32:47Z",
6+
"aliases": [
7+
"CVE-2026-2447"
8+
],
9+
"details": "Heap buffer overflow in libvpx. This vulnerability affects Firefox < 147.0.4, Firefox ESR < 140.7.1, and Firefox ESR < 115.32.1.",
10+
"severity": [],
11+
"affected": [],
12+
"references": [
13+
{
14+
"type": "ADVISORY",
15+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-2447"
16+
},
17+
{
18+
"type": "WEB",
19+
"url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2014390"
20+
},
21+
{
22+
"type": "WEB",
23+
"url": "https://www.mozilla.org/security/advisories/mfsa2026-10"
24+
}
25+
],
26+
"database_specific": {
27+
"cwe_ids": [],
28+
"severity": null,
29+
"github_reviewed": false,
30+
"github_reviewed_at": null,
31+
"nvd_published_at": "2026-02-16T15:18:34Z"
32+
}
33+
}

‎advisories/unreviewed/2026/02/GHSA-cgjg-p2m2-qm4p/GHSA-cgjg-p2m2-qm4p.json‎

Lines changed: 36 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,36 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-cgjg-p2m2-qm4p",
4+
"modified": "2026-02-16T15:32:47Z",
5+
"published": "2026-02-16T15:32:47Z",
6+
"aliases": [
7+
"CVE-2025-14573"
8+
],
9+
"details": "Mattermost versions 10.11.x <= 10.11.9 fail to enforce invite permissions when updating team settings, which allows team administrators without proper permissions to bypass restrictions and add users to their team via API requests. Mattermost Advisory ID: MMSA-2025-00561",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-14573"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://mattermost.com/security-updates"
25+
}
26+
],
27+
"database_specific": {
28+
"cwe_ids": [
29+
"CWE-862"
30+
],
31+
"severity": "LOW",
32+
"github_reviewed": false,
33+
"github_reviewed_at": null,
34+
"nvd_published_at": "2026-02-16T13:16:00Z"
35+
}
36+
}

‎advisories/unreviewed/2026/02/GHSA-ggg6-jj2q-72rr/GHSA-ggg6-jj2q-72rr.json‎

Lines changed: 52 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,52 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-ggg6-jj2q-72rr",
4+
"modified": "2026-02-16T15:32:47Z",
5+
"published": "2026-02-16T15:32:47Z",
6+
"aliases": [
7+
"CVE-2026-2557"
8+
],
9+
"details": "A vulnerability was detected in cskefu up to 8.0.1. Impacted is the function Upload of the file com/cskefu/cc/controller/resource/MediaController.java of the component File Upload. The manipulation results in cross site scripting. The attack may be launched remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N"
14+
},
15+
{
16+
"type": "CVSS_V4",
17+
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
18+
}
19+
],
20+
"affected": [],
21+
"references": [
22+
{
23+
"type": "ADVISORY",
24+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-2557"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://fx4tqqfvdw4.feishu.cn/docx/ZqvtdTniToQMw0xZL94cTpuTnac"
29+
},
30+
{
31+
"type": "WEB",
32+
"url": "https://vuldb.com/?ctiid.346165"
33+
},
34+
{
35+
"type": "WEB",
36+
"url": "https://vuldb.com/?id.346165"
37+
},
38+
{
39+
"type": "WEB",
40+
"url": "https://vuldb.com/?submit.750729"
41+
}
42+
],
43+
"database_specific": {
44+
"cwe_ids": [
45+
"CWE-79"
46+
],
47+
"severity": "MODERATE",
48+
"github_reviewed": false,
49+
"github_reviewed_at": null,
50+
"nvd_published_at": "2026-02-16T14:16:18Z"
51+
}
52+
}

0 commit comments

Comments
 (0)