Weekly briefing

SecurityLookyloo: Potential sub-system DoS due to parameter missmatch in notification

SecurityLow privilege condition filter escapes Twig sandbox, recovers "securityKey" and reaches RCE

SecurityMLflow: SSRF on unauthenticated MLflow servers via third-party scorer kwargs in the scorer invoke, register, and GenAI evaluate endpoints

SecurityMicrosoft Security Blog

SecurityMissing Authentication in CGM CLININET2 source records

Newly collected advisory · 2 entries

• Missing Authentication in CGM CLININET

  Newly collected advisory

  CVE-2025-30043

  Assessment context

  Newly collected advisory; observed by ChangeIntel, not the original publication date.

• Missing Authentication in CGM CLININET

  Newly collected advisory

  CVE-2025-30053

  Assessment context

  Newly collected advisory; observed by ChangeIntel, not the original publication date.

SecurityMusic Store <= 1.4.7 - Unauthenticated Arbitrary File Read via 'f' Parameter

SecurityNetBox MCP Server: HTTP transport exposes all NetBox data without authentication

SecurityOpen WebUI 0.11.0 before 0.11.4 ReDoS via grep_knowledge_files Event Loop

SecurityOpen WebUI 0.11.1 before 0.11.4 Stored XSS via DOCX Preview

SecurityOpenReception: Confirmation-email links built from the request Host enable pending-account takeover via `POST /api/auth/resend-confirmation`

SecurityOpenReception: invite confirmation token is replayable within its validity window and re-issues a registration-bootstrap cookie

SecurityOpenReception: one tenant's throttle row disables the PIN brute-force throttle for the same identifier in other tenants

SecurityOpenReception: race condition in add-to-tunnel and create-new-client allows overlapping appointments for one agent

SecurityOpenReception: unauthenticated ML-KEM key injection into the staff-crypto recipient directory in any tenant

SecurityOpenStack Ironic before 39.0.1 allows DELETE and GET via vendor_passthru, e.g., to delete accounts from the BMC's Redfish service.

SecurityOpenStack Ironic before 39.0.1 sometimes allows a user to change the maintenance setting on a node via PATCH to /v1/nodes/{ident} - in other words, not using the specific maintenance endpoint.

SecurityOpenStack Ironic through 39.0.1 allows a denial of service via a configdrive that results in a very large amount of uncompressed data, aka a gzip bomb.

SecurityOpenThread joiner autostart uses a publicly documented default Joining Device Credential (PSKd)

SecurityOtter Blocks 3.1.1 - 3.2.7 - Unauthenticated Non-Public Content Disclosure via REST API

SecurityOtter Blocks < 3.2.8 - Contributor+ Stored XSS via Block Style Attributes

SecurityOtter Blocks < 3.2.8 - Unauthenticated Restricted Block Content Disclosure via REST API

SecurityOtter Blocks < 3.2.8 - Unauthenticated Stored XSS via Dynamic Content Render Filter

SecurityOut-of-bounds write in the ADXL345 sensor driver RTIO streaming FIFO read path

SecurityOut-of-bounds write in the USB Bluetooth HCI transport class when a controller-to-host HCI packet exceeds the bulk endpoint maximum packet size