API - API Security Blog

CVE-2025-5620

creation_timestamp| type| source ---|---|--- 2025-06-05 00:07:27+00:00| seen|...Read More ...

June 05, 2025

CVE-2025-5622

creation_timestamp| type| source ---|---|--- 2025-06-05 01:27:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqt64rcwgl2e 2025-06-05 01:44:05+00:00| seen|...Read More ...

June 05, 2025

Umbraco Vulnerable to By-Pass of Configured Allowed Extensions for File Uploads

Impact Via a manipulated API request it's possible to upload a file that doesn't adhere with the configured allowable file extensions. Patches Patched in 15.4.2 and 16.0.0. Workarounds None. ...

June 05, 2025

anon-vec lacks sufficient checks in public API

The following functions in the anon-vec crate are unsound due to insufficient checks on their arguments:: AnonVec::get_ref() AnonVec::get_mut() AnonVec::remove_get() The crate was built as a learnin ...

June 05, 2025

AstrBot Has Path Traversal Vulnerability in /api/chat/get_file

Impact This vulnerability may lead to: Information disclosure, such as API keys for LLM providers, account passwords, and other sensitive data. Reproduce Follow these steps to set up a test environm ...

June 05, 2025

CVE-2025-5615

creation_timestamp| type| source ---|---|--- 2025-06-04 22:26:42+00:00| seen|...Read More ...

June 05, 2025

CVE-2025-5616

creation_timestamp| type| source ---|---|--- 2025-06-04 23:03:19+00:00| seen|...Read More ...

June 05, 2025

CVE-2025-49007

creation_timestamp| type| source ---|---|--- 2025-06-04 23:03:18+00:00| seen|...Read More ...

June 05, 2025