Category - API Security Blog

curl: Uncontrolled File Write/Arbitrary File Creation

Vulnerability description not...Read More ...

July 17, 2025

curl: Disk Space Exhaustion leading to a Denial of Service (DoS)

Vulnerability description not...Read More ...

July 17, 2025

CVE-2025-7433

creation_timestamp| type| source ---|---|--- 2025-07-17 19:03:40+00:00| seen|...Read More ...

July 17, 2025

CVE-2025-54068

creation_timestamp| type| source ---|---|--- 2025-07-17 18:42:26+00:00| seen|...Read More ...

July 17, 2025

GHSA-29CQ-5W36-X7W3

creation_timestamp| type| source ---|---|--- 2025-07-17 18:42:26+00:00| seen|...Read More ...

July 17, 2025

CVE-2025-32812

creation_timestamp| type| source ---|---|--- 2025-07-17 18:35:22+00:00| seen|...Read More ...

July 17, 2025

CVE-2025-7472

creation_timestamp| type| source ---|---|--- 2025-07-17 19:03:41+00:00| seen|...Read More ...

July 17, 2025

Fastify: Remote Code Execution via unsafe usage of `reply.view({ raw })` in @fastify/view (EJS template engine)

The @fastify/view plugin, when used with the EJS engine and the reply.view({ raw: <user-controlled-string> }) pattern, allowed arbitrary EJS execution. This vulnerability arose from the ...

July 17, 2025