API - API Security Blog

CVE-2025-55729

creation_timestamp| type| source ---|---|--- 2025-09-09 21:31:14+00:00| seen|...Read More ...

September 09, 2025

CVE-2025-55047

creation_timestamp| type| source ---|---|--- 2025-09-09 21:26:14+00:00| seen|...Read More ...

September 09, 2025

CVE-2025-36000

creation_timestamp| type| source ---|---|--- 2025-09-09 21:25:05+00:00| seen|...Read More ...

September 09, 2025

CVE-2025-55050

creation_timestamp| type| source ---|---|--- 2025-09-09 21:46:15+00:00| seen|...Read More ...

September 09, 2025

CVE-2025-55730

creation_timestamp| type| source ---|---|--- 2025-09-09 21:41:15+00:00| seen|...Read More ...

September 09, 2025

EUVD-2025-27473

Tautulli is a Python based monitoring and tracking tool for Plex Media Server. The /image API endpoint in Tautulli v2.15.3 and earlier is vulnerable to path traversal, allowing unauthenticated attacke ...

September 09, 2025

CoreDNS: DNS Cache Pinning via etcd Lease ID Confusion

Summary The CoreDNS etcd plugin contains a TTL confusion vulnerability where lease IDs are incorrectly used as TTL values, enabling cache pinning for very long periods. This can effectively cause a de ...

September 09, 2025

CVE-2025-59036 Infrahub allows authentication with deleted and expired API tokens

Infrahub offers a central hub to manage data, templates, and playbooks. Prior to versiond 1.3.9 and 1.4.5, a bug in the authentication logic will cause API tokens that were deleted and/or expired to b ...

September 09, 2025