Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
CVE-2025-3242 is a medium SQL injection in PHPGurukul e-Diary 1.0. The record lists no fix, so limit access and use prepared statements in the code.
CVE-2025-3241 is a medium severity XXE flaw in youkefu up to 4.2.0. No fix is listed, so limit access and disable external entities in the XML parser.
CVE-2025-32404 is a medium severity out of bounds write in RT-Labs P-Net 1.0.1 and earlier. Move to P-Net 1.0.2 and rebuild the firmware that embeds it.
CVE-2025-32403 is a medium severity out of bounds write in RT-Labs P-Net 1.0.1 and earlier. Update the Profinet library to 1.0.2 and rebuild your firmware.
CVE-2025-32401 is a medium severity heap overflow in RT-Labs P-Net 1.0.1 and earlier. Update the Profinet library to 1.0.2 and rebuild affected firmware.
CVE-2025-3240 is a high SQL injection in PHPGurukul Fire Reporting 1.2. No fixed version is listed, so limit access and use prepared statements.
CVE-2025-3239 is a high SQL injection in PHPGurukul Fire Reporting 1.2. No fixed version is listed, so limit access and use prepared statements.
CVE-2025-3238 is a high SQL injection in PHPGurukul Fire Reporting 1.2. No fixed version is listed, so limit access and use prepared statements.
CVE-2025-32375 is a critical RCE in the BentoML runner server before 1.4.8. Upgrade the bentoml package to 1.4.8 or later and restrict runner access.
Weekly insights on software supply chain security, delivered to your inbox.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.
