GHSA-wwqv-p2pp-99h5: LangGraph Checkpoint affected by RCE in "json" mode of JsonPlusSerializer 

GHSA-x4qj-2f4q-r4rx: Parse Server Vulnerable to Server-Side Request Forgery (SSRF) in File Upload via URI Format

GHSA-cpf4-pmr4-w6cx: IDOR Vulnerabilities in ZITADEL's Organization API allows Cross-Tenant Data Tempering

GHSA-gr35-vpx2-qxhc: Weblate leaks the IP of project member inviting user to be reviewer in Audit log

GHSA-vf95-55w6-qmrf: youki container escape and denial of service due to arbitrary write gadgets and procfs write redirects

Incorrect Default Permissions vulnerability in Apache DolphinScheduler.

This issue affects Apache DolphinScheduler: before 3.2.2.

Users are recommended to upgrade to version 3.3.1, which fixes the issue.

**Apache DolphinScheduler Incorrect Default Permissions Vulnerability**

Low severity GitHub Reviewed Published Sep 3, 2025 to the GitHub Advisory Database • Updated Sep 3, 2025

Headline

GHSA-rrpj-r8h7-rm7r: Apache DolphinScheduler Incorrect Default Permissions Vulnerability

ghsa: Latest News