---
title: "Security digest: August 13, 2025"
url: https://erroneo.us/security/2025-08-13/
description: "August 13, 2025 vulnerability digest: 2 CISA KEV additions (N-able); 3 critical advisories (GitHub Actions, RubyGems). What to patch and who can relax."
type: security-digest-day
section: "Security Digest"
date_published: 2025-08-13
date_modified: 2025-08-13
publisher: erroneo.us
author: erroneo.us Security Desk
license: All rights reserved. Quote with attribution and a link.
---

# Security digest: August 13, 2025

2 known exploited (cisa kev) additions and 3 critical advisories.

## Take stock

- Do you run any of these? N-able N-Central. They are being exploited in the wild (CISA KEV). Patch or mitigate if you do; CISA’s federal deadline is 2025-08-20.
- RubyGems: 2 critical advisories ( activestorage , spree ). Check with bundle audit check --update .
- GitHub Actions: 1 critical advisory ( m00nl1ght-dev/steam-workshop-deploy , BoldestDungeon/steam-workshop-deploy ). Check with grep -rn 'uses: <owner>/<action>' .github/workflows .
- None of it touches your stack? Then there is nothing to do today. That is a result, not a failure to read carefully.

## Known exploited (CISA KEV)

- [CVE-2025-8876](https://erroneo.us/security/cve/CVE-2025-8876/index.md) N-able N-Central: N-able N-Central Command Injection Vulnerability (CISA due 2025-08-20)
- [CVE-2025-8875](https://erroneo.us/security/cve/CVE-2025-8875/index.md) N-able N-Central: N-able N-Central Insecure Deserialization Vulnerability (CISA due 2025-08-20)

## Critical advisories

- [GHSA-x6gv-2rvh-qmp6](https://erroneo.us/security/ghsa/GHSA-x6gv-2rvh-qmp6/index.md) m00nl1ght-dev/steam-workshop-deploy: Exposure of Version-Control Repository to an Unauthorized Control Sphere and Insufficiently Protected Credentials — GitHub Actions m00nl1ght-dev/steam-workshop-deploy < 4 → 4; GitHub Actions BoldestDungeon/steam-workshop-deploy < 2.0.0 → 2.0.0
- [CVE-2025-24293](https://erroneo.us/security/cve/CVE-2025-24293/index.md) Active Storage allowed transformation methods that were potentially unsafe — RubyGems activestorage >= 8.0, < 8.0.2.1 → 8.0.2.1; RubyGems activestorage >= 7.2, < 7.2.2.2 → 7.2.2.2; RubyGems activestorage >= 5.2.0, < 7.1.5.2 → 7.1.5.2
- [CVE-2011-10019](https://erroneo.us/security/cve/CVE-2011-10019/index.md) Spree has Remote Command Execution vulnerability in search functionality — RubyGems spree < 0.60.2 → 0.60.2

---
Source page: https://erroneo.us/security/2025-08-13/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt