Skip to content

Commit cc92d63

Browse files
advisory-database[bot]advisory-database[bot]
committed
Publish Advisories
GHSA-239w-6x3x-fvrr GHSA-2487-c6w9-prxm GHSA-257x-mvvc-g6ff GHSA-25px-gj7m-w9m3 GHSA-2pr9-fr5g-p8hm GHSA-3927-xmmf-mw2x GHSA-45jx-x35p-4xm6 GHSA-49vq-cqmq-frgf GHSA-4rp7-5w2x-wwvh GHSA-558v-r8m2-hmjm GHSA-57x5-m2wj-35wx GHSA-69rx-rvq8-835f GHSA-6qwr-c77w-q35g GHSA-8r96-cj5h-474x GHSA-cwpc-gq4p-xxwh GHSA-gcmq-v5j6-6rjx GHSA-h298-9cph-7xc6 GHSA-p56q-w8c2-56v9 GHSA-pmw2-j962-7frc GHSA-rf8p-xv5q-wc9f GHSA-x46x-p265-r7jv
1 parent f6bcd76 commit cc92d63

File tree

21 files changed

+821
-0
lines changed

21 files changed

+821
-0
lines changed

‎advisories/unreviewed/2026/04/GHSA-239w-6x3x-fvrr/GHSA-239w-6x3x-fvrr.json‎

Lines changed: 36 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,36 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-239w-6x3x-fvrr",
4+
"modified": "2026-04-02T00:31:04Z",
5+
"published": "2026-04-02T00:31:04Z",
6+
"aliases": [
7+
"CVE-2025-66487"
8+
],
9+
"details": "IBM Aspera Shares 1.9.9 through 1.11.0 does not properly rate limit the frequency that an authenticated user can send emails, which could result in email flooding or a denial of service.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-66487"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://www.ibm.com/support/pages/node/7267848"
25+
}
26+
],
27+
"database_specific": {
28+
"cwe_ids": [
29+
"CWE-770"
30+
],
31+
"severity": "LOW",
32+
"github_reviewed": false,
33+
"github_reviewed_at": null,
34+
"nvd_published_at": "2026-04-01T23:17:02Z"
35+
}
36+
}

‎advisories/unreviewed/2026/04/GHSA-2487-c6w9-prxm/GHSA-2487-c6w9-prxm.json‎

Lines changed: 48 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,48 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-2487-c6w9-prxm",
4+
"modified": "2026-04-02T00:31:04Z",
5+
"published": "2026-04-02T00:31:04Z",
6+
"aliases": [
7+
"CVE-2026-5313"
8+
],
9+
"details": "A vulnerability has been found in Nothings stb up to 2.30. This issue affects the function stbi__gif_load_next in the library stb_image.h of the component GIF Decoder. Such manipulation leads to denial of service. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L"
14+
},
15+
{
16+
"type": "CVSS_V4",
17+
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
18+
}
19+
],
20+
"affected": [],
21+
"references": [
22+
{
23+
"type": "ADVISORY",
24+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-5313"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://vuldb.com/submit/780462"
29+
},
30+
{
31+
"type": "WEB",
32+
"url": "https://vuldb.com/vuln/354645"
33+
},
34+
{
35+
"type": "WEB",
36+
"url": "https://vuldb.com/vuln/354645/cti"
37+
}
38+
],
39+
"database_specific": {
40+
"cwe_ids": [
41+
"CWE-404"
42+
],
43+
"severity": "MODERATE",
44+
"github_reviewed": false,
45+
"github_reviewed_at": null,
46+
"nvd_published_at": "2026-04-01T22:16:21Z"
47+
}
48+
}

‎advisories/unreviewed/2026/04/GHSA-257x-mvvc-g6ff/GHSA-257x-mvvc-g6ff.json‎

Lines changed: 44 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,44 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-257x-mvvc-g6ff",
4+
"modified": "2026-04-02T00:31:04Z",
5+
"published": "2026-04-02T00:31:04Z",
6+
"aliases": [
7+
"CVE-2026-32925"
8+
],
9+
"details": "V-SFT versions 6.2.10.0 and prior contain a stack-based buffer overflow in VS6ComFile!CV7BaseMap::WriteV7DataToRom. Opening a crafted V7 file may lead to arbitrary code execution on the affected product.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
14+
},
15+
{
16+
"type": "CVSS_V4",
17+
"score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
18+
}
19+
],
20+
"affected": [],
21+
"references": [
22+
{
23+
"type": "ADVISORY",
24+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32925"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://felib.fujielectric.co.jp/en/M10010/M20060/document_detail/5d9dd71d-9494-41a4-aa5c-8e6b8b21066b?region=en-glb"
29+
},
30+
{
31+
"type": "WEB",
32+
"url": "https://jvn.jp/en/vu/JVNVU90448293"
33+
}
34+
],
35+
"database_specific": {
36+
"cwe_ids": [
37+
"CWE-121"
38+
],
39+
"severity": "HIGH",
40+
"github_reviewed": false,
41+
"github_reviewed_at": null,
42+
"nvd_published_at": "2026-04-01T23:17:02Z"
43+
}
44+
}

‎advisories/unreviewed/2026/04/GHSA-25px-gj7m-w9m3/GHSA-25px-gj7m-w9m3.json‎

Lines changed: 36 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,36 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-25px-gj7m-w9m3",
4+
"modified": "2026-04-02T00:31:04Z",
5+
"published": "2026-04-02T00:31:04Z",
6+
"aliases": [
7+
"CVE-2025-66486"
8+
],
9+
"details": "IBM Aspera Shares 1.9.9 through 1.11.0 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-66486"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://www.ibm.com/support/pages/node/7267848"
25+
}
26+
],
27+
"database_specific": {
28+
"cwe_ids": [
29+
"CWE-80"
30+
],
31+
"severity": "MODERATE",
32+
"github_reviewed": false,
33+
"github_reviewed_at": null,
34+
"nvd_published_at": "2026-04-01T23:17:02Z"
35+
}
36+
}

‎advisories/unreviewed/2026/04/GHSA-2pr9-fr5g-p8hm/GHSA-2pr9-fr5g-p8hm.json‎

Lines changed: 44 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,44 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-2pr9-fr5g-p8hm",
4+
"modified": "2026-04-02T00:31:04Z",
5+
"published": "2026-04-02T00:31:04Z",
6+
"aliases": [
7+
"CVE-2026-32928"
8+
],
9+
"details": "V-SFT versions 6.2.10.0 and prior contain a stack-based buffer overflow in VS6ComFile!CSaveData::_conv_AnimationItem. Opening a crafted V7 file may lead to arbitrary code execution on the affected product.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
14+
},
15+
{
16+
"type": "CVSS_V4",
17+
"score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
18+
}
19+
],
20+
"affected": [],
21+
"references": [
22+
{
23+
"type": "ADVISORY",
24+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32928"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://felib.fujielectric.co.jp/en/M10010/M20060/document_detail/5d9dd71d-9494-41a4-aa5c-8e6b8b21066b?region=en-glb"
29+
},
30+
{
31+
"type": "WEB",
32+
"url": "https://jvn.jp/en/vu/JVNVU90448293"
33+
}
34+
],
35+
"database_specific": {
36+
"cwe_ids": [
37+
"CWE-121"
38+
],
39+
"severity": "HIGH",
40+
"github_reviewed": false,
41+
"github_reviewed_at": null,
42+
"nvd_published_at": "2026-04-01T23:17:03Z"
43+
}
44+
}

‎advisories/unreviewed/2026/04/GHSA-3927-xmmf-mw2x/GHSA-3927-xmmf-mw2x.json‎

Lines changed: 34 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,34 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-3927-xmmf-mw2x",
4+
"modified": "2026-04-02T00:31:04Z",
5+
"published": "2026-04-02T00:31:04Z",
6+
"aliases": [
7+
"CVE-2025-66484"
8+
],
9+
"details": "IBM Aspera Shares 1.9.9 through 1.11.0 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-66484"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://www.ibm.com/support/pages/node/7267848"
25+
}
26+
],
27+
"database_specific": {
28+
"cwe_ids": [],
29+
"severity": "MODERATE",
30+
"github_reviewed": false,
31+
"github_reviewed_at": null,
32+
"nvd_published_at": "2026-04-01T23:17:02Z"
33+
}
34+
}

‎advisories/unreviewed/2026/04/GHSA-45jx-x35p-4xm6/GHSA-45jx-x35p-4xm6.json‎

Lines changed: 44 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,44 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-45jx-x35p-4xm6",
4+
"modified": "2026-04-02T00:31:04Z",
5+
"published": "2026-04-02T00:31:04Z",
6+
"aliases": [
7+
"CVE-2026-32927"
8+
],
9+
"details": "V-SFT versions 6.2.10.0 and prior contain an out-of-bounds read vulnerability in VS6MemInIF!set_temp_type_default. Opening a crafted V7 file may lead to information disclosure from the affected product.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
14+
},
15+
{
16+
"type": "CVSS_V4",
17+
"score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
18+
}
19+
],
20+
"affected": [],
21+
"references": [
22+
{
23+
"type": "ADVISORY",
24+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32927"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://felib.fujielectric.co.jp/en/M10010/M20060/document_detail/5d9dd71d-9494-41a4-aa5c-8e6b8b21066b?region=en-glb"
29+
},
30+
{
31+
"type": "WEB",
32+
"url": "https://jvn.jp/en/vu/JVNVU90448293"
33+
}
34+
],
35+
"database_specific": {
36+
"cwe_ids": [
37+
"CWE-125"
38+
],
39+
"severity": "HIGH",
40+
"github_reviewed": false,
41+
"github_reviewed_at": null,
42+
"nvd_published_at": "2026-04-01T23:17:03Z"
43+
}
44+
}

‎advisories/unreviewed/2026/04/GHSA-49vq-cqmq-frgf/GHSA-49vq-cqmq-frgf.json‎

Lines changed: 25 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,25 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-49vq-cqmq-frgf",
4+
"modified": "2026-04-02T00:31:04Z",
5+
"published": "2026-04-02T00:31:04Z",
6+
"aliases": [
7+
"CVE-2025-0711"
8+
],
9+
"details": "Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.",
10+
"severity": [],
11+
"affected": [],
12+
"references": [
13+
{
14+
"type": "ADVISORY",
15+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-0711"
16+
}
17+
],
18+
"database_specific": {
19+
"cwe_ids": [],
20+
"severity": null,
21+
"github_reviewed": false,
22+
"github_reviewed_at": null,
23+
"nvd_published_at": "2026-04-01T23:17:00Z"
24+
}
25+
}

‎advisories/unreviewed/2026/04/GHSA-4rp7-5w2x-wwvh/GHSA-4rp7-5w2x-wwvh.json‎

Lines changed: 36 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,36 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-4rp7-5w2x-wwvh",
4+
"modified": "2026-04-02T00:31:04Z",
5+
"published": "2026-04-02T00:31:04Z",
6+
"aliases": [
7+
"CVE-2025-66483"
8+
],
9+
"details": "IBM Aspera Shares 1.9.9 through 1.11.0 does not invalidate session after a password reset which could allow an authenticated user to impersonate another user on the system.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-66483"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://www.ibm.com/support/pages/node/7267848"
25+
}
26+
],
27+
"database_specific": {
28+
"cwe_ids": [
29+
"CWE-613"
30+
],
31+
"severity": "MODERATE",
32+
"github_reviewed": false,
33+
"github_reviewed_at": null,
34+
"nvd_published_at": "2026-04-01T23:17:01Z"
35+
}
36+
}

0 commit comments

Comments
 (0)