漏洞公告

React Router: Open redirect via backslash in <Link> and useNavigate (CVE-2025-68470 bypass)

React Router: Open redirect leading to XSS

React Router: RSCErrorHandler Missing Protocol Validation (XSS)

React Router: Arbitrary Constructor Injection via deserializeErrors() in React Router SSR Hydration

ImageMagick: Information Disclosure in MNG decoder because allocated memory is left unchanged

find-my-way: DDoS with HTTP2

pypdf: Possible infinite loop for not terminated inline images (ASCII85 and ASCIIHex filter)

pypdf: Possible infinite loop for not terminated inline images

pypdf: Possible long runtimes for repeated malformed cross-reference entries

pypdf: Possible large memory usage for wrong image dimensions

PostCSS: Arbitrary file read and information disclosure via attacker-controlled sourceMappingURL in CSS comments

PHPSpreadsheet: XLS/OLE sector-chain self-loop causes memory exhaustion

PHPSpreadsheet: Gnumeric reader unbounded gzip expansion causes memory exhaustion

PHPSpreadsheet: SSRF bypass via HTTP redirect in WEBSERVICE() domain whitelist

Auth.js: Configuration errors can cause existence-based auth checks to fail open (auth object populated with an error)

Auth.js: getToken() throws an uncaught exception on malformed Bearer authorization headers

Auth.js: Email normalizer validates the address before Unicode normalization, allowing a homoglyph @ bypass

Auth.js: OAuth state, nonce, and PKCE check cookies are not bound to the provider that created them

fastjson has a remote code execution (RCE) vulnerability

n8n: Snowflake Node executeQuery Operation Allows SQL Injection via Unparameterized Expression Interpolation

n8n: PostgresTrigger Node SQL Injection Allows Authenticated Users to Execute Arbitrary SQL on Connected PostgreSQL Instances

n8n: Cross-Tenant Module-Cache Poisoning in the JS Task Runner

JupyterLab: Cross-site scripting (XSS) via crafted settings file (`overrides.json`)