GHSA-7vjm-6qgq-3mrq: Shaman has soundness issues and is unmaintained

GHSA-h238-5mwf-8xw8: lakeFS affected by unauthenticated access to API usage metrics

GHSA-j945-qm58-4gjx: motionEye vulnerable to RCE via unsanitized motion config parameter

GHSA-qv78-c8hc-438r: OpenMage vulnerable to XSS in Admin Notifications

GHSA-g582-8vwr-68h2: MantisBT unauthorized disclosure of private project column configuration

`shaman::cryptoutil::write_u64v_le` and other functions mentioned above cannot garantee memory safety of get_unchecked later if both length are zero.

`shaman` is unmaintained.

**Shaman has soundness issues and is unmaintained**

Low severity GitHub Reviewed Published Nov 3, 2025 to the GitHub Advisory Database

Headline

GHSA-7vjm-6qgq-3mrq: Shaman has soundness issues and is unmaintained

ghsa: Latest News