diff --git a/advisories/unreviewed/2025/05/GHSA-26fm-jh3j-2ww5/GHSA-26fm-jh3j-2ww5.json b/advisories/unreviewed/2025/05/GHSA-26fm-jh3j-2ww5/GHSA-26fm-jh3j-2ww5.json
index ece0f0d853d..b8aa4d8cddd 100644
--- a/advisories/unreviewed/2025/05/GHSA-26fm-jh3j-2ww5/GHSA-26fm-jh3j-2ww5.json
+++ b/advisories/unreviewed/2025/05/GHSA-26fm-jh3j-2ww5/GHSA-26fm-jh3j-2ww5.json
@@ -26,6 +26,7 @@
   ],
   "database_specific": {
     "cwe_ids": [
+      "CWE-79",
       "CWE-80"
     ],
     "severity": "MODERATE",
diff --git a/advisories/unreviewed/2025/05/GHSA-44qx-v2f9-7rq9/GHSA-44qx-v2f9-7rq9.json b/advisories/unreviewed/2025/05/GHSA-44qx-v2f9-7rq9/GHSA-44qx-v2f9-7rq9.json
new file mode 100644
index 00000000000..92918628f0c
--- /dev/null
+++ b/advisories/unreviewed/2025/05/GHSA-44qx-v2f9-7rq9/GHSA-44qx-v2f9-7rq9.json
@@ -0,0 +1,45 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-44qx-v2f9-7rq9",
+  "modified": "2025-05-30T03:30:31Z",
+  "published": "2025-05-30T03:30:31Z",
+  "aliases": [
+    "CVE-2020-36846"
+  ],
+  "details": "A buffer overflow, as described in CVE-2020-8927, exists in the embedded Brotli library.  Versions of IO::Compress::Brotli prior to 0.007 included a version of the brotli library prior to version 1.0.8, where an attacker controlling the input length of a \"one-shot\" decompression request to a script can trigger a crash, which happens when copying over chunks of data larger than 2 GiB. It is recommended to update your IO::Compress::Brotli module to 0.007 or later. If one cannot update, we recommend to use the \"streaming\" API as opposed to the \"one-shot\" API, and impose chunk size limits.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-36846"
+    },
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-8927"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/google/brotli/pull/826"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/google/brotli/commit/223d80cfbec8fd346e32906c732c8ede21f0cea6"
+    },
+    {
+      "type": "ADVISORY",
+      "url": "https://github.com/advisories/GHSA-5v8v-66v8-mwm7"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/timlegge/perl-IO-Compress-Brotli/blob/8b44c83b23bb4658179e1494af4b725a1bc476bc/Changes#L52"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-05-30T01:15:20Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/05/GHSA-773x-pxjg-gxgx/GHSA-773x-pxjg-gxgx.json b/advisories/unreviewed/2025/05/GHSA-773x-pxjg-gxgx/GHSA-773x-pxjg-gxgx.json
new file mode 100644
index 00000000000..73c0d11e44e
--- /dev/null
+++ b/advisories/unreviewed/2025/05/GHSA-773x-pxjg-gxgx/GHSA-773x-pxjg-gxgx.json
@@ -0,0 +1,48 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-773x-pxjg-gxgx",
+  "modified": "2025-05-30T03:30:32Z",
+  "published": "2025-05-30T03:30:32Z",
+  "aliases": [
+    "CVE-2025-48757"
+  ],
+  "details": "An insufficient database Row-Level Security policy in Lovable through 2025-04-15 allows remote unauthenticated attackers to read or write to arbitrary database tables of generated sites.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-48757"
+    },
+    {
+      "type": "WEB",
+      "url": "https://docs.lovable.dev/changelog"
+    },
+    {
+      "type": "WEB",
+      "url": "https://gist.github.com/lhchavez/625ee42a6c408a850d35e50f8e649de9"
+    },
+    {
+      "type": "WEB",
+      "url": "https://mattpalmer.io/posts/CVE-2025-48757"
+    },
+    {
+      "type": "WEB",
+      "url": "https://x.com/danialasaria/status/1911862269996118272"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-863"
+    ],
+    "severity": "CRITICAL",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-05-30T03:15:20Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/05/GHSA-84x2-p8rx-5q4g/GHSA-84x2-p8rx-5q4g.json b/advisories/unreviewed/2025/05/GHSA-84x2-p8rx-5q4g/GHSA-84x2-p8rx-5q4g.json
new file mode 100644
index 00000000000..6cfc9b89f9e
--- /dev/null
+++ b/advisories/unreviewed/2025/05/GHSA-84x2-p8rx-5q4g/GHSA-84x2-p8rx-5q4g.json
@@ -0,0 +1,33 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-84x2-p8rx-5q4g",
+  "modified": "2025-05-30T03:30:32Z",
+  "published": "2025-05-30T03:30:32Z",
+  "aliases": [
+    "CVE-2025-44619"
+  ],
+  "details": "Tinxy WiFi Lock Controller v1 RF was discovered to be configured to transmit on an open Wi-Fi network, allowing attackers to join the network without authentication.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-44619"
+    },
+    {
+      "type": "WEB",
+      "url": "http://tinxy.com"
+    },
+    {
+      "type": "WEB",
+      "url": "http://wifi.com"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-05-30T03:15:20Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/05/GHSA-92ww-86qp-x82q/GHSA-92ww-86qp-x82q.json b/advisories/unreviewed/2025/05/GHSA-92ww-86qp-x82q/GHSA-92ww-86qp-x82q.json
new file mode 100644
index 00000000000..1fee81dd58b
--- /dev/null
+++ b/advisories/unreviewed/2025/05/GHSA-92ww-86qp-x82q/GHSA-92ww-86qp-x82q.json
@@ -0,0 +1,29 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-92ww-86qp-x82q",
+  "modified": "2025-05-30T03:30:31Z",
+  "published": "2025-05-30T03:30:31Z",
+  "aliases": [
+    "CVE-2025-44614"
+  ],
+  "details": "Tinxy WiFi Lock Controller v1 RF was discovered to store users' sensitive information, including credentials and mobile phone numbers, in plaintext.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-44614"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/ShravanSinghRathore/Tinxy/wiki/1.-WiFi-Lock-Controller-v1-RF-%281%E2%80%909%29"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-05-30T03:15:20Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/05/GHSA-pw25-rj5h-xh7p/GHSA-pw25-rj5h-xh7p.json b/advisories/unreviewed/2025/05/GHSA-pw25-rj5h-xh7p/GHSA-pw25-rj5h-xh7p.json
new file mode 100644
index 00000000000..bfeab268f63
--- /dev/null
+++ b/advisories/unreviewed/2025/05/GHSA-pw25-rj5h-xh7p/GHSA-pw25-rj5h-xh7p.json
@@ -0,0 +1,29 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-pw25-rj5h-xh7p",
+  "modified": "2025-05-30T03:30:31Z",
+  "published": "2025-05-30T03:30:31Z",
+  "aliases": [
+    "CVE-2025-44612"
+  ],
+  "details": "Tinxy WiFi Lock Controller v1 RF was discovered to transmit sensitive information in plaintext, including control information and device credentials, allowing attackers to possibly intercept and access sensitive information via a man-in-the-middle attack.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-44612"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/ShravanSinghRathore/Tinxy/wiki/1.-WiFi-Lock-Controller-v1-RF-%281%E2%80%909%29"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-05-30T03:15:20Z"
+  }
+}
\ No newline at end of file