diff --git a/advisories/unreviewed/2025/04/GHSA-5qxx-2mqf-3v7g/GHSA-5qxx-2mqf-3v7g.json b/advisories/unreviewed/2025/04/GHSA-5qxx-2mqf-3v7g/GHSA-5qxx-2mqf-3v7g.json
index 51288d7802e..9cf1eb59cf2 100644
--- a/advisories/unreviewed/2025/04/GHSA-5qxx-2mqf-3v7g/GHSA-5qxx-2mqf-3v7g.json
+++ b/advisories/unreviewed/2025/04/GHSA-5qxx-2mqf-3v7g/GHSA-5qxx-2mqf-3v7g.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-5qxx-2mqf-3v7g",
-  "modified": "2025-05-26T12:30:29Z",
+  "modified": "2025-05-28T09:31:26Z",
   "published": "2025-04-03T04:41:19Z",
   "aliases": [
     "CVE-2025-2784"
@@ -39,6 +39,10 @@
       "type": "WEB",
       "url": "https://access.redhat.com/errata/RHSA-2025:8140"
     },
+    {
+      "type": "WEB",
+      "url": "https://access.redhat.com/errata/RHSA-2025:8252"
+    },
     {
       "type": "WEB",
       "url": "https://access.redhat.com/security/cve/CVE-2025-2784"
diff --git a/advisories/unreviewed/2025/04/GHSA-89g2-jrcc-p8r7/GHSA-89g2-jrcc-p8r7.json b/advisories/unreviewed/2025/04/GHSA-89g2-jrcc-p8r7/GHSA-89g2-jrcc-p8r7.json
index ea2e97dc410..34629d88010 100644
--- a/advisories/unreviewed/2025/04/GHSA-89g2-jrcc-p8r7/GHSA-89g2-jrcc-p8r7.json
+++ b/advisories/unreviewed/2025/04/GHSA-89g2-jrcc-p8r7/GHSA-89g2-jrcc-p8r7.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-89g2-jrcc-p8r7",
-  "modified": "2025-05-26T12:30:29Z",
+  "modified": "2025-05-28T09:31:26Z",
   "published": "2025-04-14T15:31:59Z",
   "aliases": [
     "CVE-2025-32914"
@@ -39,6 +39,10 @@
       "type": "WEB",
       "url": "https://access.redhat.com/errata/RHSA-2025:8140"
     },
+    {
+      "type": "WEB",
+      "url": "https://access.redhat.com/errata/RHSA-2025:8252"
+    },
     {
       "type": "WEB",
       "url": "https://access.redhat.com/security/cve/CVE-2025-32914"
diff --git a/advisories/unreviewed/2025/04/GHSA-fqvp-p5gx-qqhg/GHSA-fqvp-p5gx-qqhg.json b/advisories/unreviewed/2025/04/GHSA-fqvp-p5gx-qqhg/GHSA-fqvp-p5gx-qqhg.json
index 9b51c320645..e312f9bc087 100644
--- a/advisories/unreviewed/2025/04/GHSA-fqvp-p5gx-qqhg/GHSA-fqvp-p5gx-qqhg.json
+++ b/advisories/unreviewed/2025/04/GHSA-fqvp-p5gx-qqhg/GHSA-fqvp-p5gx-qqhg.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-fqvp-p5gx-qqhg",
-  "modified": "2025-05-26T12:30:29Z",
+  "modified": "2025-05-28T09:31:26Z",
   "published": "2025-04-03T15:31:19Z",
   "aliases": [
     "CVE-2025-32049"
@@ -39,6 +39,10 @@
       "type": "WEB",
       "url": "https://access.redhat.com/errata/RHSA-2025:8140"
     },
+    {
+      "type": "WEB",
+      "url": "https://access.redhat.com/errata/RHSA-2025:8252"
+    },
     {
       "type": "WEB",
       "url": "https://access.redhat.com/security/cve/CVE-2025-32049"
diff --git a/advisories/unreviewed/2025/05/GHSA-2gj9-8rm6-pv54/GHSA-2gj9-8rm6-pv54.json b/advisories/unreviewed/2025/05/GHSA-2gj9-8rm6-pv54/GHSA-2gj9-8rm6-pv54.json
new file mode 100644
index 00000000000..da05d2a9df0
--- /dev/null
+++ b/advisories/unreviewed/2025/05/GHSA-2gj9-8rm6-pv54/GHSA-2gj9-8rm6-pv54.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-2gj9-8rm6-pv54",
+  "modified": "2025-05-28T09:31:27Z",
+  "published": "2025-05-28T09:31:27Z",
+  "aliases": [
+    "CVE-2025-46777"
+  ],
+  "details": "A insertion of sensitive information into log file in Fortinet FortiPortal versions 7.4.0, versions 7.2.0 through 7.2.5, and versions 7.0.0 through 7.0.9 may allow an authenticated attacker with at least read-only admin permissions to view encrypted secrets via the FortiPortal System Log.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-46777"
+    },
+    {
+      "type": "WEB",
+      "url": "https://fortiguard.fortinet.com/psirt/FG-IR-24-380"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-532"
+    ],
+    "severity": "LOW",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-05-28T08:15:22Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/05/GHSA-2q5m-qpc5-76wp/GHSA-2q5m-qpc5-76wp.json b/advisories/unreviewed/2025/05/GHSA-2q5m-qpc5-76wp/GHSA-2q5m-qpc5-76wp.json
new file mode 100644
index 00000000000..2911379c333
--- /dev/null
+++ b/advisories/unreviewed/2025/05/GHSA-2q5m-qpc5-76wp/GHSA-2q5m-qpc5-76wp.json
@@ -0,0 +1,40 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-2q5m-qpc5-76wp",
+  "modified": "2025-05-28T09:31:27Z",
+  "published": "2025-05-28T09:31:27Z",
+  "aliases": [
+    "CVE-2025-5287"
+  ],
+  "details": "The Likes and Dislikes Plugin plugin for WordPress is vulnerable to SQL Injection via the 'post' parameter in all versions up to, and including, 1.0.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-5287"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/browser/inprosysmedia-likes-dislikes-post/trunk/inprosysmedia-likes-dislikes-post.php#L76"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/ad19205d-d355-45d8-be5b-f8005459a8c7?source=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-89"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-05-28T09:15:21Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/05/GHSA-2qfg-jccx-w5cf/GHSA-2qfg-jccx-w5cf.json b/advisories/unreviewed/2025/05/GHSA-2qfg-jccx-w5cf/GHSA-2qfg-jccx-w5cf.json
new file mode 100644
index 00000000000..9b129cec5ea
--- /dev/null
+++ b/advisories/unreviewed/2025/05/GHSA-2qfg-jccx-w5cf/GHSA-2qfg-jccx-w5cf.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-2qfg-jccx-w5cf",
+  "modified": "2025-05-28T09:31:27Z",
+  "published": "2025-05-28T09:31:27Z",
+  "aliases": [
+    "CVE-2025-47295"
+  ],
+  "details": "A buffer over-read in Fortinet FortiOS versions 7.4.0 through 7.4.3, versions 7.2.0 through 7.2.7, and versions 7.0.0 through 7.0.14 may allow a remote unauthenticated attacker to crash the FGFM daemon via a specially crafted request, under rare conditions that are outside of the attacker's control.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-47295"
+    },
+    {
+      "type": "WEB",
+      "url": "https://fortiguard.fortinet.com/psirt/FG-IR-24-381"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-126"
+    ],
+    "severity": "LOW",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-05-28T08:15:22Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/05/GHSA-2w29-fw64-5ggm/GHSA-2w29-fw64-5ggm.json b/advisories/unreviewed/2025/05/GHSA-2w29-fw64-5ggm/GHSA-2w29-fw64-5ggm.json
new file mode 100644
index 00000000000..697e3dee9d2
--- /dev/null
+++ b/advisories/unreviewed/2025/05/GHSA-2w29-fw64-5ggm/GHSA-2w29-fw64-5ggm.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-2w29-fw64-5ggm",
+  "modified": "2025-05-28T09:31:26Z",
+  "published": "2025-05-28T09:31:26Z",
+  "aliases": [
+    "CVE-2025-22252"
+  ],
+  "details": "A missing authentication for critical function in Fortinet FortiProxy versions 7.6.0 through 7.6.1, FortiSwitchManager version 7.2.5, and FortiOS versions 7.4.4 through 7.4.6 and version 7.6.0 may allow an attacker with knowledge of an existing admin account to access the device as a valid admin via an authentication bypass.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-22252"
+    },
+    {
+      "type": "WEB",
+      "url": "https://fortiguard.fortinet.com/psirt/FG-IR-24-472"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-306"
+    ],
+    "severity": "CRITICAL",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-05-28T08:15:21Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/05/GHSA-4jm8-hmxq-7xq6/GHSA-4jm8-hmxq-7xq6.json b/advisories/unreviewed/2025/05/GHSA-4jm8-hmxq-7xq6/GHSA-4jm8-hmxq-7xq6.json
new file mode 100644
index 00000000000..0c9d2cca326
--- /dev/null
+++ b/advisories/unreviewed/2025/05/GHSA-4jm8-hmxq-7xq6/GHSA-4jm8-hmxq-7xq6.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-4jm8-hmxq-7xq6",
+  "modified": "2025-05-28T09:31:26Z",
+  "published": "2025-05-28T09:31:26Z",
+  "aliases": [
+    "CVE-2025-4009"
+  ],
+  "details": "The Evertz SVDN 3080ipx-10G is a High Bandwidth Ethernet Switching Fabric for Video Application. This device exposes a web management interface on port 80. This web management interface can be used by administrators to control product\nfeatures, setup network switching, and register license among other features. The application has been developed in PHP with the webEASY SDK, also named ‘ewb’ by Evertz.\n\nThis web interface has two endpoints that are vulnerable to arbitrary command injection and the authentication mechanism has a flaw leading to authentication bypass.\n\nRemote unauthenticated attackers can gain arbitrary command execution with elevated privileges ( root ) on affected devices.\n\nThis level of access could lead to serious business impact such as the interruption of media streaming, modification of media being streamed, alteration of closed captions being generated, among others.",
+  "severity": [
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:Y/R:X/V:C/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-4009"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.onekey.com/resource/security-advisory-remote-code-execution-on-evertz-svdn-cve-2025-4009"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-77"
+    ],
+    "severity": "CRITICAL",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-05-28T07:15:24Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/05/GHSA-532x-j9r7-8f73/GHSA-532x-j9r7-8f73.json b/advisories/unreviewed/2025/05/GHSA-532x-j9r7-8f73/GHSA-532x-j9r7-8f73.json
new file mode 100644
index 00000000000..15d03e85dca
--- /dev/null
+++ b/advisories/unreviewed/2025/05/GHSA-532x-j9r7-8f73/GHSA-532x-j9r7-8f73.json
@@ -0,0 +1,39 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-532x-j9r7-8f73",
+  "modified": "2025-05-28T09:31:27Z",
+  "published": "2025-05-28T09:31:27Z",
+  "aliases": [
+    "CVE-2025-27526"
+  ],
+  "details": "Deserialization of Untrusted Data vulnerability in Apache InLong.\n\nThis issue affects Apache InLong: from 1.13.0 through 2.1.0. This vulnerability which can lead to JDBC Vulnerability URLEncdoe and backspace bypass. Users are advised to upgrade to Apache InLong's 2.2.0 or cherry-pick [1] to solve it.\n\n[1]  https://github.com/apache/inlong/pull/11747",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-27526"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/apache/inlong/pull/11747"
+    },
+    {
+      "type": "WEB",
+      "url": "https://lists.apache.org/thread/4t4sqscm7xdqn883dyjy40qk6ncf26xf"
+    },
+    {
+      "type": "WEB",
+      "url": "http://www.openwall.com/lists/oss-security/2025/05/28/1"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-502"
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-05-28T08:15:21Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/05/GHSA-5c6q-hvvg-576r/GHSA-5c6q-hvvg-576r.json b/advisories/unreviewed/2025/05/GHSA-5c6q-hvvg-576r/GHSA-5c6q-hvvg-576r.json
index 96978ca9cbf..5ae66388bc3 100644
--- a/advisories/unreviewed/2025/05/GHSA-5c6q-hvvg-576r/GHSA-5c6q-hvvg-576r.json
+++ b/advisories/unreviewed/2025/05/GHSA-5c6q-hvvg-576r/GHSA-5c6q-hvvg-576r.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-5c6q-hvvg-576r",
-  "modified": "2025-05-26T12:30:29Z",
+  "modified": "2025-05-28T09:31:26Z",
   "published": "2025-05-19T18:30:46Z",
   "aliases": [
     "CVE-2025-4948"
@@ -39,6 +39,10 @@
       "type": "WEB",
       "url": "https://access.redhat.com/errata/RHSA-2025:8140"
     },
+    {
+      "type": "WEB",
+      "url": "https://access.redhat.com/errata/RHSA-2025:8252"
+    },
     {
       "type": "WEB",
       "url": "https://access.redhat.com/security/cve/CVE-2025-4948"
diff --git a/advisories/unreviewed/2025/05/GHSA-85cv-m9jh-x4vv/GHSA-85cv-m9jh-x4vv.json b/advisories/unreviewed/2025/05/GHSA-85cv-m9jh-x4vv/GHSA-85cv-m9jh-x4vv.json
new file mode 100644
index 00000000000..a69f6dc84e4
--- /dev/null
+++ b/advisories/unreviewed/2025/05/GHSA-85cv-m9jh-x4vv/GHSA-85cv-m9jh-x4vv.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-85cv-m9jh-x4vv",
+  "modified": "2025-05-28T09:31:26Z",
+  "published": "2025-05-28T09:31:26Z",
+  "aliases": [
+    "CVE-2025-25251"
+  ],
+  "details": "An Incorrect Authorization vulnerability [CWE-863] in FortiClient Mac 7.4.0 through 7.4.2, 7.2.0 through 7.2.8, 7.0.0 through 7.0.14 may allow a local attacker to escalate privileges via crafted XPC messages.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-25251"
+    },
+    {
+      "type": "WEB",
+      "url": "https://fortiguard.fortinet.com/psirt/FG-IR-25-016"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-863"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-05-28T08:15:21Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/05/GHSA-98v7-xxxv-hcrh/GHSA-98v7-xxxv-hcrh.json b/advisories/unreviewed/2025/05/GHSA-98v7-xxxv-hcrh/GHSA-98v7-xxxv-hcrh.json
new file mode 100644
index 00000000000..4f9ae96990e
--- /dev/null
+++ b/advisories/unreviewed/2025/05/GHSA-98v7-xxxv-hcrh/GHSA-98v7-xxxv-hcrh.json
@@ -0,0 +1,39 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-98v7-xxxv-hcrh",
+  "modified": "2025-05-28T09:31:27Z",
+  "published": "2025-05-28T09:31:27Z",
+  "aliases": [
+    "CVE-2025-27528"
+  ],
+  "details": "Deserialization of Untrusted Data vulnerability in Apache InLong.\n\nThis issue affects Apache InLong: from 1.13.0 through 2.1.0. \n\nThis\nvulnerability allows attackers to bypass the security mechanisms of InLong\nJDBC and leads to arbitrary file reading. Users are advised to upgrade to Apache InLong's 2.2.0 or cherry-pick [1] to solve it.\n\n[1]  https://github.com/apache/inlong/pull/11747",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-27528"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/apache/inlong/pull/11747"
+    },
+    {
+      "type": "WEB",
+      "url": "https://lists.apache.org/thread/b807rqzgyv4qgvxw3nhkq8tl6g90gqgj"
+    },
+    {
+      "type": "WEB",
+      "url": "http://www.openwall.com/lists/oss-security/2025/05/28/3"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-502"
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-05-28T08:15:21Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/05/GHSA-jj5f-jxf3-25vx/GHSA-jj5f-jxf3-25vx.json b/advisories/unreviewed/2025/05/GHSA-jj5f-jxf3-25vx/GHSA-jj5f-jxf3-25vx.json
new file mode 100644
index 00000000000..6995292d2cf
--- /dev/null
+++ b/advisories/unreviewed/2025/05/GHSA-jj5f-jxf3-25vx/GHSA-jj5f-jxf3-25vx.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-jj5f-jxf3-25vx",
+  "modified": "2025-05-28T09:31:26Z",
+  "published": "2025-05-28T09:31:26Z",
+  "aliases": [
+    "CVE-2024-54020"
+  ],
+  "details": "A missing authorization in Fortinet FortiManager versions 7.2.0 through 7.2.1, and versions 7.0.0 through 7.0.7 may allow an authenticated attacker to overwrite global threat feeds via crafted update requests.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-54020"
+    },
+    {
+      "type": "WEB",
+      "url": "https://fortiguard.fortinet.com/psirt/FG-IR-24-023"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-862"
+    ],
+    "severity": "LOW",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-05-28T08:15:20Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/05/GHSA-ppfq-jg49-mqj4/GHSA-ppfq-jg49-mqj4.json b/advisories/unreviewed/2025/05/GHSA-ppfq-jg49-mqj4/GHSA-ppfq-jg49-mqj4.json
new file mode 100644
index 00000000000..f623ce24163
--- /dev/null
+++ b/advisories/unreviewed/2025/05/GHSA-ppfq-jg49-mqj4/GHSA-ppfq-jg49-mqj4.json
@@ -0,0 +1,41 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-ppfq-jg49-mqj4",
+  "modified": "2025-05-28T09:31:26Z",
+  "published": "2025-05-28T09:31:26Z",
+  "aliases": [
+    "CVE-2025-4947"
+  ],
+  "details": "libcurl accidentally skips the certificate verification for QUIC connections when connecting to a host specified as an IP address in the URL. Therefore, it does not detect impostors or man-in-the-middle attacks.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-4947"
+    },
+    {
+      "type": "WEB",
+      "url": "https://hackerone.com/reports/3150884"
+    },
+    {
+      "type": "WEB",
+      "url": "https://curl.se/docs/CVE-2025-4947.html"
+    },
+    {
+      "type": "WEB",
+      "url": "https://curl.se/docs/CVE-2025-4947.json"
+    },
+    {
+      "type": "WEB",
+      "url": "http://www.openwall.com/lists/oss-security/2025/05/28/4"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-05-28T07:15:24Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/05/GHSA-q4f7-c648-vwr2/GHSA-q4f7-c648-vwr2.json b/advisories/unreviewed/2025/05/GHSA-q4f7-c648-vwr2/GHSA-q4f7-c648-vwr2.json
new file mode 100644
index 00000000000..6c1ea3ffbdd
--- /dev/null
+++ b/advisories/unreviewed/2025/05/GHSA-q4f7-c648-vwr2/GHSA-q4f7-c648-vwr2.json
@@ -0,0 +1,52 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-q4f7-c648-vwr2",
+  "modified": "2025-05-28T09:31:27Z",
+  "published": "2025-05-28T09:31:27Z",
+  "aliases": [
+    "CVE-2025-5082"
+  ],
+  "details": "The WP Attachments plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘attachment_id’ parameter in all versions up to, and including, 5.0.12 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-5082"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/browser/wp-attachments/tags/5.0.12/inc/html/attachmentEditIframe.php"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/browser/wp-attachments/tags/5.0.12/inc/ij-post-attachments.php#L274"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/changeset/3300269"
+    },
+    {
+      "type": "WEB",
+      "url": "https://wordpress.org/plugins/wp-attachments/#developers"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/bdc33ecc-da54-4852-8426-bfafe0dca41b?source=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-05-28T08:15:23Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/05/GHSA-r324-vgr5-73c9/GHSA-r324-vgr5-73c9.json b/advisories/unreviewed/2025/05/GHSA-r324-vgr5-73c9/GHSA-r324-vgr5-73c9.json
new file mode 100644
index 00000000000..a7d2048f231
--- /dev/null
+++ b/advisories/unreviewed/2025/05/GHSA-r324-vgr5-73c9/GHSA-r324-vgr5-73c9.json
@@ -0,0 +1,35 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-r324-vgr5-73c9",
+  "modified": "2025-05-28T09:31:26Z",
+  "published": "2025-05-28T09:31:26Z",
+  "aliases": [
+    "CVE-2025-27522"
+  ],
+  "details": "Deserialization of Untrusted Data vulnerability in Apache InLong.\n\nThis issue affects Apache InLong: from 1.13.0 through 2.1.0. This vulnerability is a secondary mining bypass for CVE-2024-26579. Users are advised to upgrade to Apache InLong's 2.2.0 or cherry-pick [1] to solve it.\n\n[1] \n\n https://github.com/apache/inlong/pull/11732",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-27522"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/apache/inlong/pull/11732"
+    },
+    {
+      "type": "WEB",
+      "url": "https://lists.apache.org/thread/s4dnmq3gwcjocxf85qk190knlzd26jby"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-502"
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-05-28T08:15:21Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/05/GHSA-v579-4342-cjrp/GHSA-v579-4342-cjrp.json b/advisories/unreviewed/2025/05/GHSA-v579-4342-cjrp/GHSA-v579-4342-cjrp.json
new file mode 100644
index 00000000000..2af3588a9fa
--- /dev/null
+++ b/advisories/unreviewed/2025/05/GHSA-v579-4342-cjrp/GHSA-v579-4342-cjrp.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-v579-4342-cjrp",
+  "modified": "2025-05-28T09:31:26Z",
+  "published": "2025-05-28T09:31:26Z",
+  "aliases": [
+    "CVE-2025-24473"
+  ],
+  "details": "A exposure of sensitive system information to an unauthorized control sphere in Fortinet FortiClientWindows versions 7.2.0 through 7.2.1 may allow an unauthorized remote attacker to view application information via navigation to a hosted webpage, if Windows is configured to accept incoming connections to port 8053 (non-default setup)",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-24473"
+    },
+    {
+      "type": "WEB",
+      "url": "https://fortiguard.fortinet.com/psirt/FG-IR-24-548"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-497"
+    ],
+    "severity": "LOW",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-05-28T08:15:21Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/05/GHSA-whfg-pc46-w8v3/GHSA-whfg-pc46-w8v3.json b/advisories/unreviewed/2025/05/GHSA-whfg-pc46-w8v3/GHSA-whfg-pc46-w8v3.json
new file mode 100644
index 00000000000..475788cd2e7
--- /dev/null
+++ b/advisories/unreviewed/2025/05/GHSA-whfg-pc46-w8v3/GHSA-whfg-pc46-w8v3.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-whfg-pc46-w8v3",
+  "modified": "2025-05-28T09:31:27Z",
+  "published": "2025-05-28T09:31:27Z",
+  "aliases": [
+    "CVE-2025-47294"
+  ],
+  "details": "A integer overflow or wraparound in Fortinet FortiOS versions 7.2.0 through 7.2.7, versions 7.0.0 through 7.0.14 may allow a remote unauthenticated attacker to crash the csfd daemon via a specially crafted request.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-47294"
+    },
+    {
+      "type": "WEB",
+      "url": "https://fortiguard.fortinet.com/psirt/FG-IR-24-388"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-190"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-05-28T08:15:22Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/05/GHSA-x8ch-h5vv-q6cm/GHSA-x8ch-h5vv-q6cm.json b/advisories/unreviewed/2025/05/GHSA-x8ch-h5vv-q6cm/GHSA-x8ch-h5vv-q6cm.json
new file mode 100644
index 00000000000..28e02aa6909
--- /dev/null
+++ b/advisories/unreviewed/2025/05/GHSA-x8ch-h5vv-q6cm/GHSA-x8ch-h5vv-q6cm.json
@@ -0,0 +1,41 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-x8ch-h5vv-q6cm",
+  "modified": "2025-05-28T09:31:26Z",
+  "published": "2025-05-28T09:31:26Z",
+  "aliases": [
+    "CVE-2025-5025"
+  ],
+  "details": "libcurl supports *pinning* of the server certificate public key for HTTPS transfers. Due to an omission, this check is not performed when connecting with QUIC for HTTP/3, when the TLS backend is wolfSSL. Documentation says the option works with wolfSSL, failing to specify that it does not for QUIC and HTTP/3. Since pinning makes the transfer succeed if the pin is fine, users could unwittingly connect to an impostor server without noticing.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-5025"
+    },
+    {
+      "type": "WEB",
+      "url": "https://hackerone.com/reports/3153497"
+    },
+    {
+      "type": "WEB",
+      "url": "https://curl.se/docs/CVE-2025-5025.html"
+    },
+    {
+      "type": "WEB",
+      "url": "https://curl.se/docs/CVE-2025-5025.json"
+    },
+    {
+      "type": "WEB",
+      "url": "http://www.openwall.com/lists/oss-security/2025/05/28/5"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-05-28T07:15:24Z"
+  }
+}
\ No newline at end of file