Security Vulnerabilities
OpenFGA is a high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar. OpenFGA v1.4.0 to v1.11.0 ( openfga-0.1.34 <= Helm chart <= openfga-0.2.48, v.1.4.0 <= docker <= v.1.11.0) are vulnerable to improper policy enforcement when certain Check and ListObject calls are executed. This issue has been patched in version 1.11.1.
CVSS Score
8.8
EPSS Score
0.001
Published
2025-11-21
Claude Code is an agentic coding tool. Prior to version 2.0.31, due to an error in sed command parsing, it was possible to bypass the Claude Code read-only validation and write to arbitrary files on the host system. This issue has been patched in version 2.0.31.
CVSS Score
9.8
EPSS Score
0.001
Published
2025-11-21
A security flaw has been discovered in itsourcecode Online File Management System 1.0. This issue affects some unknown processing of the file /ajax.php?action=login. The manipulation of the argument Username results in sql injection. The attack may be launched remotely. The exploit has been released to the public and may be exploited.
CVSS Score
7.3
EPSS Score
0.0
Published
2025-11-21
Microsoft Defender Portal Spoofing Vulnerability
CVSS Score
8.3
EPSS Score
0.001
Published
2025-11-20
Improper authorization in Dynamics OmniChannel SDK Storage Containers allows an unauthorized attacker to elevate privileges over a network.
CVSS Score
8.8
EPSS Score
0.001
Published
2025-11-20
Improper access control in GitHub Copilot and Visual Studio Code allows an authorized attacker to execute code over a network.
CVSS Score
8.0
EPSS Score
0.001
Published
2025-11-20
Azure Monitor Elevation of Privilege Vulnerability
CVSS Score
8.6
EPSS Score
0.001
Published
2025-11-20
Microsoft SharePoint Online Elevation of Privilege Vulnerability
CVSS Score
9.8
EPSS Score
0.006
Published
2025-11-20
IBM webMethods Integration 10.11 through 10.11_Core_Fix22, 10.15 through 10.15_Core_Fix22, and 11.1 through 11.1_Core_Fix6 IBM webMethods Integration allow an authenticated user to execute arbitrary code on the system, caused by the deserialization of untrusted object graphs data.
CVSS Score
8.8
EPSS Score
0.004
Published
2025-11-20
Azure Bastion Elevation of Privilege Vulnerability
CVSS Score
10.0
EPSS Score
0.001
Published
2025-11-20