[ADD] Added security adv

Author: whikernel

docs/index.md

@@ -2,26 +2,44 @@
 
 ![Main logo](_static/logo_blue.png){ align=center}
 
-### New to IRIS? 💡   
-Start with our [Getting Started guide](getting_started/) to kick-off your IRIS instance in minutes.  
+IRIS is a collaborative digital platform designed for incident response analysts to share complex investigations at a technical level.
 
-**Want to try it even faster?** 
-Check out our free rolling version demonstration instance here: [IRIS Beta](https://v200.beta.dfir-iris.org).  
+<div class="grid cards" markdown>
 
+-   :material-clock-fast:{ .lg .middle } __New to IRIS?__
 
-## What is IRIS?
-IRIS is a collaborative digital platform designed for incident response analysts to share complex investigations at a technical level. It can be installed on a dedicated server or as a portable application for roaming investigations where internet access might not be available. 
+    ---
 
-Born from the need to easily and effectively communicate lengthy and intricate investigations among analysts, IRIS is an open-source project available on our [Github organization](https://github.com/dfir-iris).
+    Start with our Getting Started guide to kick-off your IRIS instance in minutes
 
+    [:octicons-arrow-right-24: Getting started](getting_started/)
 
-## Let's connect 
+-   :material-rocket-launch:{ .lg .middle } __Try it now__
 
-Join the IRIS community and expand your network! Feel free to reach out with any questions or feedback on our Discord Channel, engage or follow us on Twitter, share ideas via email. We're always happy to hear from you! 
+    ---
 
-## We're improving
-Our Documentation is in a constant state of evolution!  🚀   
-If you can't find what you're looking for, please [contact us](/contact) and we'll make it happen.
+    Want to try it even faster? Check out our free rolling version demonstration instance
 
+    [:octicons-arrow-right-24: IRIS Beta](https://v200.beta.dfir-iris.org)
+
+-   :material-scale-balance:{ .lg .middle } __Open Source__
+
+    ---
+
+    Born from the need to effectively communicate intricate investigations, IRIS is fully open-source
+
+    [:octicons-arrow-right-24: GitHub](https://github.com/dfir-iris)
+
+-   :material-account-group:{ .lg .middle } __Let's connect__
+
+    ---
+
+    Join the IRIS community! Reach out on Discord, follow us on Twitter, or share ideas via email
+
+    [:octicons-arrow-right-24: Contact](/contact)
+
+</div>
+
+---
 
 *Powered by the Community, for the Community*. 

docs/security-advisories.md

@@ -4,6 +4,20 @@ We take security seriously at DFIR-IRIS. We are committed to providing a secure
 
 This page lists all security advisories that have been published for the code released by DFIR-IRIS.
 
+## [CVE-2026-22783](https://github.com/dfir-iris/iris-web/security/advisories/GHSA-qhqj-8qw6-wp8v) <small>_ Oct 22, 2025 _</small>
+
+| CVE ID | Github ID | Severity | Impacted product |  
+|--------|-----------|-----------|-------|
+| [CVE-2026-22783](https://nvd.nist.gov/vuln/detail/CVE-2026-22783) | [GHSA-qhqj-8qw6-wp8v](https://github.com/dfir-iris/iris-web/security/advisories/GHSA-qhqj-8qw6-wp8v) | High - CVSS3 8.1/10 | iris-web |
+
+### Description
+Prior to 2.4.24, the DFIR-IRIS datastore file management system has a vulnerability where mass assignment of the file_local_name field combined with path trust in the delete operation enables authenticated users to delete arbitrary filesystem paths. The vulnerability manifests through a three-step attack chain: authenticated users upload a file to the datastore, update the file's file_local_name field to point to an arbitrary filesystem path through mass assignment, then trigger the delete operation which removes the target file without path validation. 
+
+### Affected versions
+- `iris-web` < `2.4.24`
+
+### Fixed versions
+- `iris-web` >= `2.4.24`
 
 ## [CVE-2024-34060](https://github.com/dfir-iris/iris-web/security/advisories/GHSA-9rw6-5q9j-82fm) <small>_ Feb 18, 2024 _</small>
 

mkdocs.yml

@@ -38,6 +38,7 @@ markdown_extensions:
         - name: mermaid
           class: mermaid
           format: !!python/name:pymdownx.superfences.fence_code_format
+  - attr_list
 
 extra:
   analytics: