CyberSecBulletin

DavidOsipov vulnerabilities

We track 2 vulnerabilities in DavidOsipov products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on August 6, 2025.

2vulnerabilities
1critical
1high
0exploited
9.0average CVSS score

Latest DavidOsipov vulnerabilities

  • 8.7 High severity

    Vision-ui: Uncontrolled Resource Consumption

    CVE-2025-54884DavidOsipov

    Vision UI is a collection of enterprise-grade, dependency-free modules for modern web projects. In versions 1.4.0 and below, the generateSecureId and getSecureRandomInt functions in security-kit versions prior to 3.5.0 (packaged in Vision UI 1.4.0 and below) a

  • 9.3 Critical severity

    Vision-ui: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

    CVE-2025-54883DavidOsipov

    Vision UI is a collection of enterprise-grade, dependency-free modules for modern web projects. In versions 1.4.0 and below, the getSecureRandomInt function in security-kit versions prior to 3.5.0 (packaged in Vision-ui <= 1.4.0) contains a critical cryptograp