CVE-2025-1112
published 2025-07-09CVE-2025-1112: IBM OpenPages with Watson 8.3 and 9.0 could allow an authenticated user to obtain sensitive information that should only be available to privileged users.
PriorityP418medium4.3CVSS 3.1
AVNACLPRLUINSUCLINAN
EPSS
0.19%
9.3th percentile
IBM OpenPages with Watson 8.3 and 9.0 could allow an authenticated user to obtain sensitive information that should only be available to privileged users.
Affected
5 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| github.com | esm-dev_esm.sh | >= 0 < 0.0.0-20251118065157-87d2f6497574 | 0.0.0-20251118065157-87d2f6497574 |
| ibm | openpages_with_watson | — | — |
| ibm | openpages_with_watson | — | — |
| ibm | openpages_with_watson | >= 8.3 < 8.3.0.3.2 | 8.3.0.3.2 |
| ibm | openpages_with_watson | >= 9.0 < 9.0.0.5.3 | 9.0.0.5.3 |
CVSS provenance
nvdv3.14.3MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
esm.sh CDN service has JS Template Literal Injection in CSS-to-JavaScript
ghsa·2025-11-19
CVE-2025-65026 [MEDIUM] CWE-94 esm.sh CDN service has JS Template Literal Injection in CSS-to-JavaScript
esm.sh CDN service has JS Template Literal Injection in CSS-to-JavaScript
### Summary
The esm.sh CDN service contains a Template Literal Injection vulnerability (CWE-94) in its CSS-to-JavaScript module conversion feature.
When a CSS file is requested with the `?module` query parameter, esm.sh converts it to a JavaScript module by embedding the CSS content directly into a template literal without proper sanitization.
An attacker can inject malicious JavaScript code using `${...}` expressions within CSS files, which will execute when the module is imported by victim applications. This enables Cross-Site Scripting (XSS) in browsers and Remote Code Execution (RCE) in Electron applications.
**Root Cause:**
The CSS module conversion logic (`router.go:1112-1119`) performs incomplete sanitizat
GHSA
GHSA-qwf5-4p6v-8h59: IBM OpenPages with Watson 8
ghsa_unreviewed·2025-07-09
CVE-2025-1112 [MEDIUM] CWE-282 GHSA-qwf5-4p6v-8h59: IBM OpenPages with Watson 8
IBM OpenPages with Watson 8.3 and 9.0 could allow an authenticated user to obtain sensitive information that should only be available to privileged users.
GHSA
LlamaIndex has Incomplete Documentation of Program Execution related to JsonPickleSerializer component
ghsa·2025-07-07
CVE-2025-3108 [MEDIUM] CWE-1112 LlamaIndex has Incomplete Documentation of Program Execution related to JsonPickleSerializer component
LlamaIndex has Incomplete Documentation of Program Execution related to JsonPickleSerializer component
Incomplete Documentation of Program Execution exists in the run-llama/llama_index library's JsonPickleSerializer component, affecting versions v0.12.27 through v0.12.40. This vulnerability allows remote code execution due to an insecure fallback to Python's pickle module. JsonPickleSerializer prioritizes deserialization using pickle.loads(), which can execute arbitrary code when processing untrusted data. Attackers can exploit this by crafting malicious payloads to achieve full system compromise. The root cause involves the use of an insecure fallback strategy without sufficient input validation or protective safeguards. Version 0.12.41 renames JsonPickleSerializer to PickleSerializer an
Red Hat
kernel: f2fs: fix to do sanity check on sbi->total_valid_block_count
vendor_redhat·2025-07-03·CVSS 5.5
CVE-2025-38163 [MEDIUM] kernel: f2fs: fix to do sanity check on sbi->total_valid_block_count
kernel: f2fs: fix to do sanity check on sbi->total_valid_block_count
In the Linux kernel, the following vulnerability has been resolved:
f2fs: fix to do sanity check on sbi->total_valid_block_count
syzbot reported a f2fs bug as below:
------------[ cut here ]------------
kernel BUG at fs/f2fs/f2fs.h:2521!
RIP: 0010:dec_valid_block_count+0x3b2/0x3c0 fs/f2fs/f2fs.h:2521
Call Trace:
f2fs_truncate_data_blocks_range+0xc8c/0x11a0 fs/f2fs/file.c:695
truncate_dnode+0x417/0x740 fs/f2fs/node.c:973
truncate_nodes+0x3ec/0xf50 fs/f2fs/node.c:1014
f2fs_truncate_inode_blocks+0x8e3/0x1370 fs/f2fs/node.c:1197
f2fs_do_truncate_blocks+0x840/0x12b0 fs/f2fs/file.c:810
f2fs_truncate_blocks+0x10d/0x300 fs/f2fs/file.c:838
f2fs_truncate+0x417/0x720 fs/f2fs/file.c:888
f2fs_setattr+0xc4f/0x12f0 fs/f2fs/file.c:1112
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2025-07-09
Published