API - API Security Blog

CVE-2025-8301

creation_timestamp| type| source ---|---|--- 2025-09-02 23:04:55+00:00| seen|...Read More ...

September 02, 2025

CVE-2025-8300

creation_timestamp| type| source ---|---|--- 2025-09-02 23:36:20+00:00| seen|...Read More ...

September 02, 2025

CVE-2025-8299

creation_timestamp| type| source ---|---|--- 2025-09-02 23:31:20+00:00| seen|...Read More ...

September 02, 2025

CVE-2025-8298

creation_timestamp| type| source ---|---|--- 2025-09-02 23:16:19+00:00| seen|...Read More ...

September 02, 2025

GHSA-XQJR-WFX3-GMXV ArrayQueue’s push_front is not panic-safe

The safe API array_queue::ArrayQueue::push_front can lead to deallocating uninitialized memory if a panic occurs while invoking the clone method on the passed argument. Specifically, push_front receiv ...

September 02, 2025

GHSA-33PR-M977-5W97 Soft Serve vulnerable to arbitrary file writing through SSH API

Attackers can create/override arbitrary files with uncontrolled data. For a PoC, spin up an instance of soft-serve as explained in the README, and execute the following command: sh ssh -p23231 localho ...

September 02, 2025

GHSA-45QJ-4XQ3-3C45 mcp-markdownify-server vulnerable to command injection in pptx-to-markdown tool

Summary A command injection vulnerability exists in the mcp-markdownify-server MCP Server. The vulnerability is caused by the unsanitized use of input parameters within a call to child_process.exec, e ...

September 02, 2025

CVE-2025-57778

creation_timestamp| type| source ---|---|--- 2025-09-02 20:54:24+00:00| seen|...Read More ...

September 02, 2025