{"vulnerability": "cve-2025-7140", "sightings": [{"uuid": "82b4394f-4e47-4a24-a43c-95a225f9da20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-7140", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ltfwv767762s", "content": "", "creation_timestamp": "2025-07-07T23:29:17.017708Z"}, {"uuid": "1e17737f-228f-4bfb-a062-efe7d62672ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-71403", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mrzm7fofvq22", "content": "better-auth v1.1.20\u672a\u6e80\u3067\u3001\u7d76\u5bfeURL\u3068\u30ef\u30a4\u30eb\u30c9\u30ab\u30fc\u30c9\u30c9\u30e1\u30a4\u30f3\u306e\u4fe1\u983c\u3055\u308c\u305f\u30aa\u30ea\u30b8\u30f3\u691c\u8a3c\u306b\u30d0\u30a4\u30d1\u30b9\u8106\u5f31\u6027\u3002\u653b\u6483\u8005\u306f\u60aa\u610f\u3042\u308b\u30b3\u30fc\u30eb\u30d0\u30c3\u30afURL\u3067\u30ea\u30c0\u30a4\u30ec\u30af\u30c8\u3092\u767a\u751f\u3055\u305b\u3001\u30c8\u30fc\u30af\u30f3\u3092\u76d7\u3080\u53ef\u2026\nCVE-2025-71403 CVSS 7.1 | HIGH", "creation_timestamp": "2026-08-01T13:47:11.810794Z"}, {"uuid": "1238edeb-73f3-4a6a-adbe-c4c74de2459c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-71401", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3ms5os36ck22s", "content": "CVE-2025-71401 - better-auth\nIf Better Auth is not properly configured, an attacker can make a specific type of request that breaks all routes, causing users to see 404 errors. This only happens if\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#betterauth #bekacru #npm #CVE #infosec", "creation_timestamp": "2026-08-03T04:44:05.121665Z"}, {"uuid": "a80f0c1c-4274-4f85-9c55-3050b3b5ad07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-71401", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3msavnlqgs323", "content": "CVE-2025-71401 \u00b7 trending #8\n\nCurrently trending CVE - Hype Score: 3 - better-auth (npm) before 1.4.2 allows an external request to configure baseURL when it is not otherwise defined (e.g., BETTER_AUTH_URL is unset). An attacker able to make the v... https://cvemon.intruder.io/cves/CVE-2025-71401", "creation_timestamp": "2026-08-04T11:24:49.988878Z"}, {"uuid": "5b3c687a-6749-4c3c-b87e-94ac7a33f749", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-71402", "type": "seen", "source": "https://bsky.app/profile/cybersecinsight.bsky.social/post/3ms3vkldfn52c", "content": "\ud83d\udd0d Vulnerability Spotlight | Part 2/3\n\n\u26a0\ufe0f CVE-2025-71402\n\nbetter-auth versions greater than 1.3.34 and before 1.4.0 contain a vulnerability in the multi-session plugin's /sign-out after-hook, which trusts ...", "creation_timestamp": "2026-08-02T11:39:50.263424Z"}, {"uuid": "0f9a954c-b97f-42cc-b0ef-f1f63fcbbb05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-71400", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3ms4c6anz3p22", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2025-71400 \u0432 better-auth passkey: \u043a\u0430\u043a \u0445\u0430\u043a\u0435\u0440\u044b \u043c\u043e\u0433\u0443\u0442 \u0443\u0434\u0430\u043b\u044f\u0442\u044c \u0447\u0443\u0436\u0438\u0435 \u043a\u043b\u044e\u0447\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430\n\n\n\nhttps://kripta.biz/posts/293EB070-968B-4A93-8F93-C5D8431B64FE", "creation_timestamp": "2026-08-02T15:25:35.478141Z"}, {"uuid": "edefd5d1-55d5-4800-bb8c-725a6c9219a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-71400", "type": "seen", "source": "https://bsky.app/profile/qiancx.bsky.social/post/3ms4c6axj2h2v", "content": "CVE-2025-71400:better-auth passkey 1.4.0 \u4e4b\u524d\u7248\u672c\u7684 IDOR \u6f0f\u6d1e\u6df1\u5ea6\u89e3\u6790\n\n\n\nhttps://qian.cx/posts/9B1E1A1B-DD7B-46BB-B99A-5A3AC4ABFA00", "creation_timestamp": "2026-08-02T15:25:36.039014Z"}, {"uuid": "815f2e73-3417-4ea0-8152-5ec6bf17a0bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-71400", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3ms4c6hrmqt2g", "content": "CVE-2025-71400: \u05d7\u05d5\u05dc\u05e9\u05d4 \u05e7\u05e8\u05d9\u05d8\u05d9\u05ea \u05d1-better-auth passkey \u05d4\u05de\u05d0\u05e4\u05e9\u05e8\u05ea \u05de\u05d7\u05d9\u05e7\u05ea \u05de\u05e4\u05ea\u05d7\u05d5\u05ea \u05de\u05e2\u05d1\u05e8 \u05e9\u05dc \u05de\u05e9\u05ea\u05de\u05e9\u05d9\u05dd \u05d0\u05d7\u05e8\u05d9\u05dd\n\n\n\nhttps://khesef.xyz/posts/A134FA65-F2E7-4414-B279-8A836921234F", "creation_timestamp": "2026-08-02T15:25:43.003572Z"}, {"uuid": "56cb5cd1-9d66-4eaa-b000-8253a15cffcb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-71409", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3msjk4wtjtu2d", "content": "\u8a8d\u8a3c\u4e0d\u5099\u306b\u3088\u308a\u3001\u4e0d\u6b63\u306a\u5730\u4e0a\u5c40\u304cCPDLC\u30e1\u30c3\u30bb\u30fc\u30b8\u3092\u6ce8\u5165\u3059\u308b\u53ef\u80fd\u6027\u3002\u30d1\u30a4\u30ed\u30c3\u30c8\u306e\u6df7\u4e71\u3092\u62db\u304f\u3002\nCVE-2025-71409 CVSS 7.1 | HIGH\nhttps://nvd.nist.gov/vuln/detail/CVE-2025-71409", "creation_timestamp": "2026-08-07T21:52:37.457636Z"}, {"uuid": "be2c42e9-c8a7-4876-b37b-5f5ac57e4736", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-71405", "type": "seen", "source": "https://bsky.app/profile/cybersecinsight.bsky.social/post/3mt4lmcz7og27", "content": "\ud83d\udd0d Vulnerability Spotlight | Part 2/3\n\n\u26a0\ufe0f CVE-2025-71405\n\nchi versions before v5.2.2 contain an open redirect vulnerability in the RedirectSlashes middleware function that uses the Host header to construct...", "creation_timestamp": "2026-08-15T11:39:44.222278Z"}, {"uuid": "8129d650-f66b-467b-85bc-fd3fc5c34a88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-71407", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtwfxywrn32e", "content": "\ud83d\udea8 CVE-2025-71407 \u2014 CVSS 9.3 CRITICAL\n\nNokogiri before 1.18.3 contains a stack buffer overflow vulnerability in libxml2 when reporting DTD validat...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2025-71407\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-25T18:08:05.565439Z"}, {"uuid": "5db3347e-baec-4135-bad3-1d1324d6b8ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-71407", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtwwc6v4vu25", "content": "CVE-2025-71407 - nokogiri\nThe Ruby library Nokogiri, used to read and process XML data, can be forced to crash or run unwanted code when it handles specially crafted XML definitions from untrusted\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#nokogiri #sparklemotion #CVE #infosec", "creation_timestamp": "2026-08-25T23:00:06.724983Z"}, {"uuid": "6f5ec90b-e4dc-4e07-b181-05a7fdd013bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-71408", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrghf4fvnp2q", "content": "\ud83d\udfe0 CVE-2025-71408 - High (7.8)\n\nNLTK (Natural Language Toolkit) before version 3.9.3 contains an eval injection vulnerability in ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2025-71408/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-24T23:00:20.511419Z"}, {"uuid": "a83c461c-4a4e-4a8d-9202-c61ddb172ac0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-71408", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mrgwgrya5i23", "content": "NLTK v3.9.3\u4ee5\u524d\u306ecollocations\u30e2\u30b8\u30e5\u30fc\u30eb\u3067eval\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u8106\u5f31\u6027\u3002\u653b\u6483\u8005\u306fPython\u30b3\u30fc\u30c9\u5b9f\u884c\u3084OS\u30b3\u30de\u30f3\u30c9\u5b9f\u884c\u304c\u53ef\u80fd\u3002\nCVE-2025-71408 CVSS 7.8 | HIGH", "creation_timestamp": "2026-07-25T03:29:42.035969Z"}]}