TI-2025-06334 CVE-2025-6965 · GHSA-2m69-gcr7-jv3q
Integer Truncation on SQLite
Priority HIGH 72
There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available.
RHSA-2025:18219
cert-manager Operator for Red Hat OpenShift 1.16.0
Released 2025-10-16 · Red Hat rating Important · View on Red Hat →
Fixed in
- cert-manager operator for Red Hat OpenShift 1.16 registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9
Fixes 10 records
TI-2025-06766 CVE-2025-7425 · GHSA-8c4w-j52q-j4jq
Libxslt: libxml2: heap use-after-free in libxslt caused by atype corruption in xmlattrptr
Priority HIGH 69
A flaw was found in libxslt where the attribute type, atype, flags are modified in a way that corrupts internal memory management.
TI-2025-05340 CVE-2025-5914 · GHSA-7376-x4rm-3v8x
Libarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c
Priority HIGH 67
A vulnerability has been identified in the libarchive library, specifically within the archive_read_format_rar_seek_data() function.
TI-2024-11791 CVE-2024-12718 · GHSA-2pg8-h2j6-28xm
Bypass extraction filter to modify file metadata outside extraction directory
Priority MEDIUM 63
Allows modifying some file metadata (e.g.
TI-2025-04033 CVE-2025-4517 · GHSA-6r6c-684h-9j7p
Arbitrary writes via tarfile realpath overflow
Priority MEDIUM 51
Allows arbitrary filesystem writes outside the extraction directory during extraction with filter="data".
TI-2025-31732 CVE-2025-49796 · GHSA-83xx-9f6p-vwfj
Libxml: type confusion leads to denial of service (dos)
Priority MEDIUM 48
A vulnerability was found in libxml2.
TI-2025-31730 CVE-2025-49794 · GHSA-qg4c-8pj4-qgw2
Libxml: heap use after free (uaf) leads to denial of service (dos)
Priority MEDIUM 47
A use-after-free vulnerability was found in libxml2.
TI-2025-03675 CVE-2025-4138 · GHSA-4g4g-fqw4-prp2
Bypassing extraction filter to create symlinks to arbitrary targets outside extraction directory
Priority MEDIUM 42
Allows the extraction filter to be ignored, allowing symlink targets to point outside the destination directory, and the modification of some file metadata.
TI-2025-08188 CVE-2025-8941 · GHSA-hqqx-rjqh-53c2
Linux-pam: incomplete fix for cve-2025-6020
Priority LOW 36
A flaw was found in linux-pam.
TI-2025-05440 CVE-2025-6020
Linux-pam: linux-pam directory traversal
Priority LOW 36
A flaw was found in linux-pam.