API - API Security Blog

CVE-2025-43787

creation_timestamp| type| source ---|---|--- 2025-09-12 19:34:32+00:00| seen|...Read More ...

September 12, 2025

CVE-2025-57579

creation_timestamp| type| source ---|---|--- 2025-09-12 19:29:31+00:00| seen|...Read More ...

September 12, 2025

CVE-2025-39796

creation_timestamp| type| source ---|---|--- 2025-09-12 19:19:31+00:00| seen|...Read More ...

September 12, 2025

CVE-2025-39798

creation_timestamp| type| source ---|---|--- 2025-09-12 18:58:08+00:00| seen|...Read More ...

September 12, 2025

CVE-2025-10318 JeecgBoot WebSocket Message sendWebSocketMsg improper authorization

A vulnerability was identified in JeecgBoot up to 3.8.2. Affected by this vulnerability is an unknown functionality of the file /api/system/sendWebSocketMsg of the component WebSocket Message Handler. ...

September 12, 2025

CVE-2025-58434 Flowise Cloud and Local Deployments have Unauthenticated Password Reset Token Disclosure that Leads to Account Takeover

Flowise is a drag & drop user interface to build a customized large language model flow. In version 3.0.5 and earlier, the forgot-password endpoint in Flowise returns sensitive information inc ...

September 12, 2025

CVE-2025-58434

Flowise is a drag & drop user interface to build a customized large language model flow. In version 3.0.5 and earlier, the forgot-password endpoint in Flowise returns sensitive information inc ...

September 12, 2025

CVE-2025-51554

creation_timestamp| type| source ---|---|--- 2025-09-12 16:39:56+00:00| seen|...Read More ...

September 12, 2025