Recent Advisories

Severity ID Title Vendor Product Date Type
LOW 2.7 CVE-2025-61652

Action API discussiontoolspageinfo does not check for authorizeRead for the page_CVE-2025-61652

Vulnerability in Wikimedia Foundation DiscussionTools.This issue affects DiscussionTools: from * before 1.43.4, 1.44.1.

Wikimedia Foundation DiscussionTools * CVE
LOW 2.3 CVE-2026-25221

PolarLearn has Multiple Login CSRFs via Missing OAuth state Parameter (GitHub & Google)_CVE-2026-25221

PolarLearn is a free and open-source learning program. In 0-PRERELEASE-15 and earlier, the OAuth 2.0 implementation for GitHub and Google login pro...

polarnl PolarLearn <= v0-PRERELEASE-15 CVE
LOW 2.3 CVE-2025-6927

Autoblocks from global account suppressions are publicly visible_CVE-2025-6927

Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/specials/pagers/BlockListPager.Php, i...

Wikimedia Foundation MediaWiki >= 1.42.0 CVE
LOW 2.1 CVE-2025-6593

“{{SITENAME}} registered email address has been changed” email sent to unverified email addresses_CVE-2025-6593

Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/user/User.Php. This issue affects Me...

Wikimedia Foundation MediaWiki 1.27.0 CVE
LOW 2.1 CVE-2025-6592

Creating a permanent account from a temporary account associates temp username and IP address with real username in AbuseLog_CVE-2025-6592

Vulnerability in Wikimedia Foundation AbuseFilter. This vulnerability is associated with program files includes/auth/AuthManager.Php. This issue a...

Wikimedia Foundation AbuseFilter fe0b1cb9e9691faf4d8d9bd80646589f6ec37615 CVE
LOW 2.1 CVE-2025-6589

With MultiBlocks enabled and a user who is suppressed via a MultiBlock, a user without ‘hideuser’ can see the hidden username in the BlockList_CVE-2025-6589

Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/specials/pagers/BlockListPager.Php. ...

Wikimedia Foundation MediaWiki >= 1.42.0 CVE
LOW 2.8 CVE-2025-36194

This Power System update is being released to address_CVE-2025-36194

IBM PowerVM Hypervisor FW1110.00 through FW1110.03, FW1060.00 through FW1060.51, and FW950.00 through FW950.F0 may expose a limited amount of data ...

IBM PowerVM Hypervisor FW1110.00 CVE
LOW 2.7 CVE-2025-61643

EventStreams publishes suppressed recent change entries that are suppressed from their creation_CVE-2025-61643

Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/recentchanges/RecentChangeRCFeedNotif...

Wikimedia Foundation MediaWiki * CVE
LOW 1.7 CVE-2025-61641

API list=allpages with maxsize is making really slow queries_CVE-2025-61641

Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/api/ApiQueryAllPages.Php. This issue...

Wikimedia Foundation MediaWiki * CVE
LOW 1.7 CVE-2025-61639

Suppressed blocked IP is visible in Special:BlockList, RC, and other places_CVE-2025-61639

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with p...

Wikimedia Foundation MediaWiki * CVE