This repository hosts public security advisories authored by Suman Roy. These documents serve as the official references for assigned Common Vulnerabilities and Exposures (CVE) identifiers and document the technical details of discovered vulnerabilities.
The contents of this repository are limited to:
- ✅ Public advisories for assigned CVE IDs.
- ✅ Technical descriptions of vulnerability types and impact.
- ✅ Version information for affected software.
- ✅ Remediation or mitigation steps.
This repository may contain:
⚠️ Exploit code, payloads, or active Proof of Concept (PoC) scripts.⚠️ Vulnerability details for issues.
| CVE ID | Status | Affected Software | Vulnerability Type | NVD Link | PoC/Advisory |
|---|---|---|---|---|---|
| CVE-2025-70559 | 🟢 Live | pdfminer.six (All versions) | Insecure Pickle Deserialization | NVD | 📄 Details | 🔒 GHSA |
| CVE-2025-70560 | 🟢 Live | boltz (All versions) | Insecure Pickle Deserialization | NVD | 📄 Details | 🐛 Issue |
Legend: 🟢 Live |
⚠️ Pending | 🔴 Disputed
All disclosures are made in accordance with responsible disclosure practices. Technical details are published only after:
- The vulnerability has been reported to the vendor or maintainer.
- A coordinated release date has been reached, or a reasonable remediation period has elapsed.
- A patch or mitigation is available for users.
Advisories are maintained as individual Markdown files in the root directory as per their respective Year, named by their corresponding CVE ID (e.g., CVE-YYYY-NNNNN.md).
Security research and advisories are authored by Suman Roy.
- 📧 Email: secureme@sumanroy.in
- 🌐 Website: sumanroy.in
- 👔 LinkedIn: linkedin.com/in/sumanrox