--- title: "Security digest: April 24, 2025" url: https://erroneo.us/security/2025-04-24/ description: "April 24, 2025 vulnerability digest: 1 brief (SAP NetWeaver Visual Composer: Unauthenticated…); 1 critical advisory (PyPI). What to patch and who can relax." type: security-digest-day section: "Security Digest" date_published: 2025-04-24 date_modified: 2026-10-21 publisher: erroneo.us author: erroneo.us Security Desk license: All rights reserved. Quote with attribution and a link. --- # Security digest: April 24, 2025 1 editorial brief and 1 critical advisory. ## Take stock - Check exposure: SAP NetWeaver Visual Composer: Unauthenticated Upload RCE . Anyone running SAP NetWeaver Java with the Visual Composer framework installed, especially if it was internet-reachable during 2025 or is still on unsupported NetWeaver 7.0. - PyPI: 1 critical advisory ( h11 ). Check with pip-audit (or: pip show ) . - None of it touches your stack? Then there is nothing to do today. That is a result, not a failure to read carefully. ## Editorial briefs - **Check exposure** [SAP NetWeaver Visual Composer: Unauthenticated Upload RCE](https://erroneo.us/security/briefs/sap-netweaver-visual-composer-cve-2025-31324/index.md): Patches have existed since April and May 2025, but this was a mass-exploited zero-day used by ransomware crews, so every SAP Java shop should confirm the fix and hunt for leftover webshells. ## Known exploited (CISA KEV) None. ## Critical advisories - [CVE-2025-43859](https://erroneo.us/security/cve/CVE-2025-43859/index.md) h11 accepts some malformed Chunked-Encoding bodies — PyPI h11 < 0.16.0 → 0.16.0 --- Source page: https://erroneo.us/security/2025-04-24/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt