API - API Security Blog

CVE-2025-48068

creation_timestamp| type| source ---|---|--- 2025-05-29 12:34:23+00:00| seen| https://bsky.app/profile/redmin78.bsky.social/post/3lqcq46gck22x 2025-05-29 13:59:57+00:00| seen| https://bsky.app/profile ...

May 29, 2025

CVE-2025-4687

creation_timestamp| type| source ---|---|--- 2025-05-29 10:08:50+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqchx2t7owv2 2025-05-29 12:1 ...

May 29, 2025

CVE-2025-47933 Argo CD allows cross-site scripting on repositories page

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Prior to versions 2.13.8, 2.14.13, and 3.0.4, an attacker can perform arbitrary actions on behalf of the victim via the API. D ...

May 29, 2025

CVE-2025-48388

creation_timestamp| type| source ---|---|--- 2025-05-29 10:08:17+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqchwvgwyfv2 2025-05-29 13:5 ...

May 29, 2025

CVE-2025-47933 Argo CD allows cross-site scripting on repositories page

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Prior to versions 2.13.8, 2.14.13, and 3.0.4, an attacker can perform arbitrary actions on behalf of the victim via the API. D ...

May 29, 2025

Medium: jetty

Issue Overview: In Eclipse Jetty 7.2.2 to 9.4.38, 10.0.0.alpha0 to 10.0.1, and 11.0.0.alpha0 to 11.0.1, CPU usage can reach 100% upon receiving a large invalid TLS frame. (CVE-2021-28165) Affected P ...

May 29, 2025

CVE-2025-48473

creation_timestamp| type| source ---|---|--- 2025-05-29 16:42:34+00:00| seen|...Read More ...

May 29, 2025

CVE-2025-48047

creation_timestamp| type| source ---|---|--- 2025-05-29 12:40:10+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqcqfmdnnab2 2025-05-29 13:5 ...

May 29, 2025