PyTorch versions prior to 3.7.0 contain an inconsistency in the bernoulli_p decompose function within decompositions.py. This inconsistency affects the behavior of nn.Dropout1d, nn.Dropout2d, and nn.Dropout3d modules when the fallback_random parameter is set to true. The issue results in a deviation from the expected eager CPU implementation behavior.
A vulnerability in PyTorch versions before 2.7.0 causes the bitwise_right_shift operation to produce incorrect output when given certain out-of-bounds values for its "other" argument. This flaw affects the availability of the software but does not impact confidentiality or integrity. The issue is classified under CWE-787 (Out-of-bounds Write).
CVE-2025-46150 is a medium severity vulnerability in PyTorch versions before 2.7.0. It causes inconsistent results when using the FractionalMaxPool2d operation in conjunction with torch.compile. The issue affects the correctness of computations but does not impact confidentiality, integrity, or availability.
CVE-2025-46149 is a medium severity vulnerability in PyTorch versions before 2.7.0. It causes an assertion error in the nn.Fold module when the inductor feature is used. This issue does not impact confidentiality, integrity, or availability beyond causing the assertion failure.
Mongoose before 8.9.5 can improperly use a nested $where filter with a populate() match, leading to search injection. NOTE: this issue exists because of an incomplete fix for CVE-2024-53900.
Improper permission check in ZooKeeper AdminServer lets authorized clients to run snapshot and restore command with insufficient permissions.
This issue affects Apache ZooKeeper: from 3.9.0 before 3.9.4.
Users are recommended to upgrade to version 3.9.4, which fixes the issue.
The issue can be mitigated by disabling both commands (via admin.snapshot.enabled and admin.restore.enabled), disabling the whole AdminServer interface (via admin.enableServer), or ensuring that the root ACL does not provide open permissions. (Note that ZooKeeper ACLs are not recursive, so this does not impact operations on child nodes besides notifications from recursive watches.)
A buffer overflow vulnerability exists in the MongoDB C driver bson library's bson_append functions when constructing BSON documents that exceed the maximum size limit (INT32_MAX). This can cause segmentation faults and application crashes. The issue affects libbson versions prior to 1.27.5, MongoDB Server v7.0 versions before 7.0.16, and MongoDB Server v8.0 versions before 8.0.1. A patch is available to address this vulnerability.
A Server-Side Request Forgery (SSRF) vulnerability exists in GitLab CE/EE versions from 16.11 up to but not including 18.1.6, from 18.2 up to but not including 18.2.6, and from 18.3 up to but not including 18.3.2. This flaw allows authenticated users to make unintended internal requests via crafted sequences in proxy environments.
Red Hat OpenShift Dev Spaces provides a cloud developer workspace server and a browser-based IDE built for teams and organizations. Dev Spaces runs in OpenShift and is well-suited for container-based development. The 3.23 release is based on Eclipse Che 7.107 and uses the DevWorkspace engine to provide support for workspaces based on devfile v2.1 and v2.2. Users still using the v1 standard should migrate as soon as possible. https://devfile.io/docs/2.2.0/migrating-to-devfile-v2 Dev Spaces supports OpenShift EUS releases v4.14 and higher. Users are expected to update to supported OpenShift releases in order to continue to get Dev Spaces updates. https://access.redhat.com/support/policy/updates/openshift#crw
Apache NiFi 1.10.0 through 2.0.0 are missing fine-grained authorization checking for Parameter Contexts, referenced Controller Services, and referenced Parameter Providers, when creating new Process Groups.
Creating a new Process Group can include binding to a Parameter Context, but in cases where the Process Group did not reference any Parameter values, the framework did not check user authorization for the bound Parameter Context. Missing authorization for a bound Parameter Context enabled clients to download non-sensitive Parameter values after creating the Process Group.
Creating a new Process Group can also include referencing existing Controller Services or Parameter Providers. The framework did not check user authorization for referenced Controller Services or Parameter Providers, enabling clients to create Process Groups and use these components that were otherwise unauthorized.
This vulnerability is limited in scope to authenticated users authorized to create Process Groups. The scope is further limited to deployments with component-based authorization policies. Upgrading to Apache NiFi 2.1.0 is the recommended mitigation, which includes authorization checking for Parameter and Controller Service references on Process Group creation.
A missing authorization vulnerability in GitLab CE/EE versions before 18.1.5, 18.2 before 18.2.5, and 18.3 before 18.3.1 allows unauthenticated users to access sensitive manual CI/CD variables via the GraphQL API. This issue has been addressed in the specified patched versions.
A malicious user may submit a specially-crafted complex payload that otherwise meets the default request size limit which results in excessive memory and CPU consumption of Vault. This may lead to a timeout in Vault’s auditing subroutine, potentially resulting in the Vault server to become unresponsive. This vulnerability, CVE-2025-6203, is fixed in Vault Community Edition 1.20.3 and Vault Enterprise 1.20.3, 1.19.9, 1.18.14, and 1.16.25.
A stored cross-site scripting (XSS) vulnerability exists in GitLab CE/EE versions 18.2.0 through before 18.2.2. Authenticated users could inject malicious HTML content into scoped label descriptions, which may be executed in other users' browsers under certain conditions. This issue has been fixed in version 18.2.2.
A cross-site scripting (XSS) vulnerability exists in GitLab CE/EE versions from 14.2 up to but not including 18.0.6, 18.1 up to but not including 18.1.4, and 18.2 up to but not including 18.2.2. This flaw could allow an attacker to inject malicious content and perform actions on behalf of users under certain conditions. The issue has been assigned CVE-2025-7734 and is rated with high severity. A patch is available to address this vulnerability.
A cross-site scripting (XSS) vulnerability exists in GitLab CE/EE versions 18.1.0 through before 18.1.4 and 18.2.0 through before 18.2.2. This flaw allows authenticated users to inject malicious HTML into work item names, potentially leading to account takeover.
A privilege assignment vulnerability in GitLab CE/EE versions from 17.7 up to but not including 18.0.6, 18.1 up to but not including 18.1.4, and 18.2 up to but not including 18.2.2 allows authenticated users with certain roles and permissions to delete issues, including confidential ones, by inviting users with a specific role.
Apache Superset contains an improper access control vulnerability in its /explore endpoint. A missing authorization check allows an authenticated user to discover metadata about datasources they do not have permission to access. By iterating through the datasource_id in the URL, an attacker can enumerate and confirm the existence and names of protected datasources, leading to sensitive information disclosure.
This issue affects Apache Superset: before 5.0.0.
Users are recommended to upgrade to version 5.0.0, which fixes the issue.
A bypass of the DISALLOWED_SQL_FUNCTIONS security feature in Apache Superset allows for the execution of blocked SQL functions. An attacker can use a special inline block to circumvent the denylist. This allows a user with SQL Lab access to execute functions that were intended to be disabled, leading to the disclosure of sensitive database information like the software version.
This issue affects Apache Superset: before 5.0.0.
Users are recommended to upgrade to version 5.0.0, which fixes the issue.