Category - API Security Blog

Node.js: Windows Device Names Still Allow Path Traversal in UNC Paths After CVE-2025-27210 Fix

Vulnerability description not...Read More ...

August 05, 2025

CVE-2025-54804

creation_timestamp| type| source ---|---|--- 2025-08-05 03:53:50+00:00| seen|...Read More ...

August 05, 2025

CVE-2025-54870

creation_timestamp| type| source ---|---|--- 2025-08-05 03:58:50+00:00| seen|...Read More ...

August 05, 2025

CVE-2025-54803

creation_timestamp| type| source ---|---|--- 2025-08-05 04:03:51+00:00| seen|...Read More ...

August 05, 2025

CVE-2025-54865

creation_timestamp| type| source ---|---|--- 2025-08-05 04:08:51+00:00| seen|...Read More ...

August 05, 2025

CVE-2025-8535

creation_timestamp| type| source ---|---|--- 2025-08-05 04:13:52+00:00| seen|...Read More ...

August 05, 2025

CVE-2025-8537

creation_timestamp| type| source ---|---|--- 2025-08-05 04:18:53+00:00| seen|...Read More ...

August 05, 2025

Lichess: Server-Side Request Forgery (SSRF) via Game Export API

The Lichess game export API was found to be vulnerable to Server-Side Request Forgery (SSRF) due to insufficient input validation of the "players" parameter. This allowed an attacker ...

August 05, 2025