CVE-2025-30089

CVSS v3 Score
5.4
Medium

Vulnerability Description

gurk (aka gurk-rs) through 0.6.3 mishandles ANSI escape sequences.

CVSS:6.3(Medium)

The MongoDB Shell may be susceptible to control character injection where an attacker with control of the user’s clipboard could manipulate them to paste text into mongosh that evaluates arbitrary cod...

CVSS:6.5(Medium)

Deno is a JavaScript, TypeScript, and WebAssembly runtime with secure defaults. Starting in version 1.32.1 and prior to version 1.41.0 of the deno library, maliciously crafted permission request can s...

CVSS:6.5(Medium)

A vulnerability was found in python-sql where unary operators do not escape non-Expression.

CVSS:3.9(Low)

The MongoDB Shell may be susceptible to control character injection where an attacker with control over the database cluster contents can inject control characters into the shell output. This may resu...

CVSS:7.1(High)

RARLAB WinRAR before 7.00, on Linux and UNIX platforms, allows attackers to spoof the screen output, or cause a denial of service, via ANSI escape sequences.

CVSS:3.6(Low)

Dangerzone is software for converting potentially dangerous PDFs, office documents, or images to safe PDFs. The Dangerzone CLI (`dangerzone-cli` command) logs output from the container where the file ...