RHBA-2025:3538
Vulnerability from csaf_redhat - Published: 2025-04-30 13:59 - Updated: 2026-11-09 05:52Summary
Red Hat Bug Fix Advisory: Red Hat Quay v3.9.11 bug fix release
Severity
Important
Notes
Topic: Red Hat Quay 3.9.11 is now available with bug fixes.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: Quay 3.9.11
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in Gunicorn. This vulnerability allows request smuggling, leading to cache poisoning, data exposure, session manipulation, Server-side request forgery (SSRF), Cross-site scripting (XSS), denial of service (DoS), data integrity compromise, security bypass, and information leakage via improper validation of the 'Transfer-Encoding' header.
7.5 (High)
Affected products
Fixed
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Quay-3:quay/clair-rhel8@sha256:4ccd0e8b2b9706570c794a4844e0ddd7d63de3f56a1fe68ca3502700fb1c6778_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:ffb291a574f1af24e834facc8bc11812173baa1b008be27001529e940a15efc3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:3d77281f5665103a7d16c3e940c749264ec4fe97361fd92c7f28fe8319cdeeb8_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:b324dc3a4a888b9706f862f780e7ad6d0d08e5a68261cf7abea0f089cad1be70_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-builder-rhel8@sha256:8f7a57dc1983f3a091120efbefff77657fcf6bf99548bb5484fd4f36a6c85df0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:00dca2ca8b4defe3e6bb919696122db8f2075e839fdb6d7445dd6d04b88797d7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:5c60efa145579c65bf59b6d7b7049ae1878fa3975e79abbe3ad3ad0a66f45d96_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-operator-bundle@sha256:df44ff8686b925d1d67a4ec36f7f1cbdc5eda783eac9661c80aa19a2ae72c6b3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-operator-rhel8@sha256:f49b8cd5c394da46fdcf0ef8d2ee2122f089fd44149ef09089d62b8597f82a0f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Quay-3:quay/quay-rhel8@sha256:9ab357534805da1d2e6e05d7c36f12c257ae6bb2745ceccec94218c0148d00a8_amd64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in the `golang.org/x/oauth2/jws` package in the token parsing component. This vulnerability is made possible because of the use of `strings.Split(token, ".")` to split JWT tokens, which can lead to excessive memory consumption when processing maliciously crafted tokens with a large number of `.` characters. An attacker could exploit this functionality by sending numerous malformed tokens and can trigger memory exhaustion and a Denial of Service.
7.5 (High)
Affected products
Fixed
10 products, the same list as for
CVE-2024-6827
Threats
Impact
Important
A flaw was found in the golang.org/x/crypto/ssh package. SSH clients and servers are vulnerable to increased resource consumption, possibly leading to memory exhaustion and a DoS. This can occur during key exchange when the other party is slow to respond during key exchange.
7.5 (High)
Affected products
Fixed
10 products, the same list as for
CVE-2024-6827
Threats
Impact
Important
A flaw was found in Jinja. In affected versions, an oversight in how the Jinja sandboxed environment interacts with the `|attr` filter allows an attacker who controls the content of a template to execute arbitrary Python code. To exploit the vulnerability, an attacker needs to control the content of a template. Whether that is the case depends on the type of application using Jinja. This vulnerability impacts users of applications that execute untrusted templates. Jinja's sandbox does catch calls to `str.format` and ensures they don't escape the sandbox. However, it's possible to use the `|attr` filter to get a reference to a string's plain format method, bypassing the sandbox.
7.3 (High)
Affected products
Fixed
10 products, the same list as for
CVE-2024-6827
Threats
Impact
Important
References
27 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat Quay 3.9.11 is now available with bug fixes.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Quay 3.9.11",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHBA-2025:3538",
"url": "https://access.redhat.com/errata/RHBA-2025:3538"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhba-2025_3538.json"
}
],
"title": "Red Hat Bug Fix Advisory: Red Hat Quay v3.9.11 bug fix release",
"tracking": {
"current_release_date": "2026-11-09T05:52:07+00:00",
"generator": {
"date": "2026-11-09T05:52:07+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.4.5"
}
},
"id": "RHBA-2025:3538",
"initial_release_date": "2025-04-30T13:59:28+00:00",
"revision_history": [
{
"date": "2025-04-30T13:59:28+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2025-04-30T13:59:28+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-11-09T05:52:07+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Quay v3",
"product": {
"name": "Quay v3",
"product_id": "8Base-Quay-3",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:quay:3::el8"
}
}
}
],
"category": "product_family",
"name": "Red Hat Quay"
},
{
"branches": [
{
"category": "product_version",
"name": "quay/quay-bridge-operator-bundle@sha256:ffb291a574f1af24e834facc8bc11812173baa1b008be27001529e940a15efc3_amd64",
"product": {
"name": "quay/quay-bridge-operator-bundle@sha256:ffb291a574f1af24e834facc8bc11812173baa1b008be27001529e940a15efc3_amd64",
"product_id": "quay/quay-bridge-operator-bundle@sha256:ffb291a574f1af24e834facc8bc11812173baa1b008be27001529e940a15efc3_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-bundle@sha256:ffb291a574f1af24e834facc8bc11812173baa1b008be27001529e940a15efc3?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-bundle\u0026tag=v3.9.11-10"
}
}
},
{
"category": "product_version",
"name": "quay/quay-bridge-operator-rhel8@sha256:3d77281f5665103a7d16c3e940c749264ec4fe97361fd92c7f28fe8319cdeeb8_amd64",
"product": {
"name": "quay/quay-bridge-operator-rhel8@sha256:3d77281f5665103a7d16c3e940c749264ec4fe97361fd92c7f28fe8319cdeeb8_amd64",
"product_id": "quay/quay-bridge-operator-rhel8@sha256:3d77281f5665103a7d16c3e940c749264ec4fe97361fd92c7f28fe8319cdeeb8_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-rhel8@sha256:3d77281f5665103a7d16c3e940c749264ec4fe97361fd92c7f28fe8319cdeeb8?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel8\u0026tag=v3.9.11-5"
}
}
},
{
"category": "product_version",
"name": "quay/quay-builder-rhel8@sha256:8f7a57dc1983f3a091120efbefff77657fcf6bf99548bb5484fd4f36a6c85df0_amd64",
"product": {
"name": "quay/quay-builder-rhel8@sha256:8f7a57dc1983f3a091120efbefff77657fcf6bf99548bb5484fd4f36a6c85df0_amd64",
"product_id": "quay/quay-builder-rhel8@sha256:8f7a57dc1983f3a091120efbefff77657fcf6bf99548bb5484fd4f36a6c85df0_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-rhel8@sha256:8f7a57dc1983f3a091120efbefff77657fcf6bf99548bb5484fd4f36a6c85df0?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel8\u0026tag=v3.9.11-4"
}
}
},
{
"category": "product_version",
"name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:b324dc3a4a888b9706f862f780e7ad6d0d08e5a68261cf7abea0f089cad1be70_amd64",
"product": {
"name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:b324dc3a4a888b9706f862f780e7ad6d0d08e5a68261cf7abea0f089cad1be70_amd64",
"product_id": "quay/quay-builder-qemu-rhcos-rhel8@sha256:b324dc3a4a888b9706f862f780e7ad6d0d08e5a68261cf7abea0f089cad1be70_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-qemu-rhcos-rhel8@sha256:b324dc3a4a888b9706f862f780e7ad6d0d08e5a68261cf7abea0f089cad1be70?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8\u0026tag=v3.9.11-4"
}
}
},
{
"category": "product_version",
"name": "quay/clair-rhel8@sha256:4ccd0e8b2b9706570c794a4844e0ddd7d63de3f56a1fe68ca3502700fb1c6778_amd64",
"product": {
"name": "quay/clair-rhel8@sha256:4ccd0e8b2b9706570c794a4844e0ddd7d63de3f56a1fe68ca3502700fb1c6778_amd64",
"product_id": "quay/clair-rhel8@sha256:4ccd0e8b2b9706570c794a4844e0ddd7d63de3f56a1fe68ca3502700fb1c6778_amd64",
"product_identification_helper": {
"purl": "pkg:oci/clair-rhel8@sha256:4ccd0e8b2b9706570c794a4844e0ddd7d63de3f56a1fe68ca3502700fb1c6778?arch=amd64\u0026repository_url=registry.redhat.io/quay/clair-rhel8\u0026tag=v3.9.11-5"
}
}
},
{
"category": "product_version",
"name": "quay/quay-container-security-operator-bundle@sha256:00dca2ca8b4defe3e6bb919696122db8f2075e839fdb6d7445dd6d04b88797d7_amd64",
"product": {
"name": "quay/quay-container-security-operator-bundle@sha256:00dca2ca8b4defe3e6bb919696122db8f2075e839fdb6d7445dd6d04b88797d7_amd64",
"product_id": "quay/quay-container-security-operator-bundle@sha256:00dca2ca8b4defe3e6bb919696122db8f2075e839fdb6d7445dd6d04b88797d7_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-bundle@sha256:00dca2ca8b4defe3e6bb919696122db8f2075e839fdb6d7445dd6d04b88797d7?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-bundle\u0026tag=v3.9.11-4"
}
}
},
{
"category": "product_version",
"name": "quay/quay-container-security-operator-rhel8@sha256:5c60efa145579c65bf59b6d7b7049ae1878fa3975e79abbe3ad3ad0a66f45d96_amd64",
"product": {
"name": "quay/quay-container-security-operator-rhel8@sha256:5c60efa145579c65bf59b6d7b7049ae1878fa3975e79abbe3ad3ad0a66f45d96_amd64",
"product_id": "quay/quay-container-security-operator-rhel8@sha256:5c60efa145579c65bf59b6d7b7049ae1878fa3975e79abbe3ad3ad0a66f45d96_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-rhel8@sha256:5c60efa145579c65bf59b6d7b7049ae1878fa3975e79abbe3ad3ad0a66f45d96?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel8\u0026tag=v3.9.11-6"
}
}
},
{
"category": "product_version",
"name": "quay/quay-operator-bundle@sha256:df44ff8686b925d1d67a4ec36f7f1cbdc5eda783eac9661c80aa19a2ae72c6b3_amd64",
"product": {
"name": "quay/quay-operator-bundle@sha256:df44ff8686b925d1d67a4ec36f7f1cbdc5eda783eac9661c80aa19a2ae72c6b3_amd64",
"product_id": "quay/quay-operator-bundle@sha256:df44ff8686b925d1d67a4ec36f7f1cbdc5eda783eac9661c80aa19a2ae72c6b3_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-bundle@sha256:df44ff8686b925d1d67a4ec36f7f1cbdc5eda783eac9661c80aa19a2ae72c6b3?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-operator-bundle\u0026tag=v3.9.11-20"
}
}
},
{
"category": "product_version",
"name": "quay/quay-operator-rhel8@sha256:f49b8cd5c394da46fdcf0ef8d2ee2122f089fd44149ef09089d62b8597f82a0f_amd64",
"product": {
"name": "quay/quay-operator-rhel8@sha256:f49b8cd5c394da46fdcf0ef8d2ee2122f089fd44149ef09089d62b8597f82a0f_amd64",
"product_id": "quay/quay-operator-rhel8@sha256:f49b8cd5c394da46fdcf0ef8d2ee2122f089fd44149ef09089d62b8597f82a0f_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-rhel8@sha256:f49b8cd5c394da46fdcf0ef8d2ee2122f089fd44149ef09089d62b8597f82a0f?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel8\u0026tag=v3.9.11-6"
}
}
},
{
"category": "product_version",
"name": "quay/quay-rhel8@sha256:9ab357534805da1d2e6e05d7c36f12c257ae6bb2745ceccec94218c0148d00a8_amd64",
"product": {
"name": "quay/quay-rhel8@sha256:9ab357534805da1d2e6e05d7c36f12c257ae6bb2745ceccec94218c0148d00a8_amd64",
"product_id": "quay/quay-rhel8@sha256:9ab357534805da1d2e6e05d7c36f12c257ae6bb2745ceccec94218c0148d00a8_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel8@sha256:9ab357534805da1d2e6e05d7c36f12c257ae6bb2745ceccec94218c0148d00a8?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-rhel8\u0026tag=v3.9.11-14"
}
}
}
],
"category": "architecture",
"name": "amd64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/clair-rhel8@sha256:4ccd0e8b2b9706570c794a4844e0ddd7d63de3f56a1fe68ca3502700fb1c6778_amd64 as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/clair-rhel8@sha256:4ccd0e8b2b9706570c794a4844e0ddd7d63de3f56a1fe68ca3502700fb1c6778_amd64"
},
"product_reference": "quay/clair-rhel8@sha256:4ccd0e8b2b9706570c794a4844e0ddd7d63de3f56a1fe68ca3502700fb1c6778_amd64",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-bridge-operator-bundle@sha256:ffb291a574f1af24e834facc8bc11812173baa1b008be27001529e940a15efc3_amd64 as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:ffb291a574f1af24e834facc8bc11812173baa1b008be27001529e940a15efc3_amd64"
},
"product_reference": "quay/quay-bridge-operator-bundle@sha256:ffb291a574f1af24e834facc8bc11812173baa1b008be27001529e940a15efc3_amd64",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-bridge-operator-rhel8@sha256:3d77281f5665103a7d16c3e940c749264ec4fe97361fd92c7f28fe8319cdeeb8_amd64 as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:3d77281f5665103a7d16c3e940c749264ec4fe97361fd92c7f28fe8319cdeeb8_amd64"
},
"product_reference": "quay/quay-bridge-operator-rhel8@sha256:3d77281f5665103a7d16c3e940c749264ec4fe97361fd92c7f28fe8319cdeeb8_amd64",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-builder-qemu-rhcos-rhel8@sha256:b324dc3a4a888b9706f862f780e7ad6d0d08e5a68261cf7abea0f089cad1be70_amd64 as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:b324dc3a4a888b9706f862f780e7ad6d0d08e5a68261cf7abea0f089cad1be70_amd64"
},
"product_reference": "quay/quay-builder-qemu-rhcos-rhel8@sha256:b324dc3a4a888b9706f862f780e7ad6d0d08e5a68261cf7abea0f089cad1be70_amd64",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-builder-rhel8@sha256:8f7a57dc1983f3a091120efbefff77657fcf6bf99548bb5484fd4f36a6c85df0_amd64 as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-builder-rhel8@sha256:8f7a57dc1983f3a091120efbefff77657fcf6bf99548bb5484fd4f36a6c85df0_amd64"
},
"product_reference": "quay/quay-builder-rhel8@sha256:8f7a57dc1983f3a091120efbefff77657fcf6bf99548bb5484fd4f36a6c85df0_amd64",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-container-security-operator-bundle@sha256:00dca2ca8b4defe3e6bb919696122db8f2075e839fdb6d7445dd6d04b88797d7_amd64 as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:00dca2ca8b4defe3e6bb919696122db8f2075e839fdb6d7445dd6d04b88797d7_amd64"
},
"product_reference": "quay/quay-container-security-operator-bundle@sha256:00dca2ca8b4defe3e6bb919696122db8f2075e839fdb6d7445dd6d04b88797d7_amd64",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-container-security-operator-rhel8@sha256:5c60efa145579c65bf59b6d7b7049ae1878fa3975e79abbe3ad3ad0a66f45d96_amd64 as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:5c60efa145579c65bf59b6d7b7049ae1878fa3975e79abbe3ad3ad0a66f45d96_amd64"
},
"product_reference": "quay/quay-container-security-operator-rhel8@sha256:5c60efa145579c65bf59b6d7b7049ae1878fa3975e79abbe3ad3ad0a66f45d96_amd64",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-operator-bundle@sha256:df44ff8686b925d1d67a4ec36f7f1cbdc5eda783eac9661c80aa19a2ae72c6b3_amd64 as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-operator-bundle@sha256:df44ff8686b925d1d67a4ec36f7f1cbdc5eda783eac9661c80aa19a2ae72c6b3_amd64"
},
"product_reference": "quay/quay-operator-bundle@sha256:df44ff8686b925d1d67a4ec36f7f1cbdc5eda783eac9661c80aa19a2ae72c6b3_amd64",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-operator-rhel8@sha256:f49b8cd5c394da46fdcf0ef8d2ee2122f089fd44149ef09089d62b8597f82a0f_amd64 as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-operator-rhel8@sha256:f49b8cd5c394da46fdcf0ef8d2ee2122f089fd44149ef09089d62b8597f82a0f_amd64"
},
"product_reference": "quay/quay-operator-rhel8@sha256:f49b8cd5c394da46fdcf0ef8d2ee2122f089fd44149ef09089d62b8597f82a0f_amd64",
"relates_to_product_reference": "8Base-Quay-3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "quay/quay-rhel8@sha256:9ab357534805da1d2e6e05d7c36f12c257ae6bb2745ceccec94218c0148d00a8_amd64 as a component of Quay v3",
"product_id": "8Base-Quay-3:quay/quay-rhel8@sha256:9ab357534805da1d2e6e05d7c36f12c257ae6bb2745ceccec94218c0148d00a8_amd64"
},
"product_reference": "quay/quay-rhel8@sha256:9ab357534805da1d2e6e05d7c36f12c257ae6bb2745ceccec94218c0148d00a8_amd64",
"relates_to_product_reference": "8Base-Quay-3"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-6827",
"cwe": {
"id": "CWE-444",
"name": "Inconsistent Interpretation of HTTP Requests"
},
"discovery_date": "2025-03-20T11:07:09.471036+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2353700"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Gunicorn. This vulnerability allows request smuggling, leading to cache poisoning, data exposure, session manipulation, Server-side request forgery (SSRF), Cross-site scripting (XSS), denial of service (DoS), data integrity compromise, security bypass, and information leakage via improper validation of the \u0027Transfer-Encoding\u0027 header.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "gunicorn: HTTP Request Smuggling in benoitc/gunicorn",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-Quay-3:quay/clair-rhel8@sha256:4ccd0e8b2b9706570c794a4844e0ddd7d63de3f56a1fe68ca3502700fb1c6778_amd64",
"8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:ffb291a574f1af24e834facc8bc11812173baa1b008be27001529e940a15efc3_amd64",
"8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:3d77281f5665103a7d16c3e940c749264ec4fe97361fd92c7f28fe8319cdeeb8_amd64",
"8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:b324dc3a4a888b9706f862f780e7ad6d0d08e5a68261cf7abea0f089cad1be70_amd64",
"8Base-Quay-3:quay/quay-builder-rhel8@sha256:8f7a57dc1983f3a091120efbefff77657fcf6bf99548bb5484fd4f36a6c85df0_amd64",
"8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:00dca2ca8b4defe3e6bb919696122db8f2075e839fdb6d7445dd6d04b88797d7_amd64",
"8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:5c60efa145579c65bf59b6d7b7049ae1878fa3975e79abbe3ad3ad0a66f45d96_amd64",
"8Base-Quay-3:quay/quay-operator-bundle@sha256:df44ff8686b925d1d67a4ec36f7f1cbdc5eda783eac9661c80aa19a2ae72c6b3_amd64",
"8Base-Quay-3:quay/quay-operator-rhel8@sha256:f49b8cd5c394da46fdcf0ef8d2ee2122f089fd44149ef09089d62b8597f82a0f_amd64",
"8Base-Quay-3:quay/quay-rhel8@sha256:9ab357534805da1d2e6e05d7c36f12c257ae6bb2745ceccec94218c0148d00a8_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-6827"
},
{
"category": "external",
"summary": "RHBZ#2353700",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2353700"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-6827",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-6827"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-6827",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-6827"
},
{
"category": "external",
"summary": "https://huntr.com/bounties/1b4f8f38-39da-44b6-9f98-f618639d0dd7",
"url": "https://huntr.com/bounties/1b4f8f38-39da-44b6-9f98-f618639d0dd7"
}
],
"release_date": "2025-03-20T10:09:55.725000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-04-30T13:59:28+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-Quay-3:quay/clair-rhel8@sha256:4ccd0e8b2b9706570c794a4844e0ddd7d63de3f56a1fe68ca3502700fb1c6778_amd64",
"8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:ffb291a574f1af24e834facc8bc11812173baa1b008be27001529e940a15efc3_amd64",
"8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:3d77281f5665103a7d16c3e940c749264ec4fe97361fd92c7f28fe8319cdeeb8_amd64",
"8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:b324dc3a4a888b9706f862f780e7ad6d0d08e5a68261cf7abea0f089cad1be70_amd64",
"8Base-Quay-3:quay/quay-builder-rhel8@sha256:8f7a57dc1983f3a091120efbefff77657fcf6bf99548bb5484fd4f36a6c85df0_amd64",
"8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:00dca2ca8b4defe3e6bb919696122db8f2075e839fdb6d7445dd6d04b88797d7_amd64",
"8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:5c60efa145579c65bf59b6d7b7049ae1878fa3975e79abbe3ad3ad0a66f45d96_amd64",
"8Base-Quay-3:quay/quay-operator-bundle@sha256:df44ff8686b925d1d67a4ec36f7f1cbdc5eda783eac9661c80aa19a2ae72c6b3_amd64",
"8Base-Quay-3:quay/quay-operator-rhel8@sha256:f49b8cd5c394da46fdcf0ef8d2ee2122f089fd44149ef09089d62b8597f82a0f_amd64",
"8Base-Quay-3:quay/quay-rhel8@sha256:9ab357534805da1d2e6e05d7c36f12c257ae6bb2745ceccec94218c0148d00a8_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHBA-2025:3538"
},
{
"category": "workaround",
"details": "Red Hat Product Security currently does not have a recommended mitigation at this time.",
"product_ids": [
"8Base-Quay-3:quay/clair-rhel8@sha256:4ccd0e8b2b9706570c794a4844e0ddd7d63de3f56a1fe68ca3502700fb1c6778_amd64",
"8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:ffb291a574f1af24e834facc8bc11812173baa1b008be27001529e940a15efc3_amd64",
"8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:3d77281f5665103a7d16c3e940c749264ec4fe97361fd92c7f28fe8319cdeeb8_amd64",
"8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:b324dc3a4a888b9706f862f780e7ad6d0d08e5a68261cf7abea0f089cad1be70_amd64",
"8Base-Quay-3:quay/quay-builder-rhel8@sha256:8f7a57dc1983f3a091120efbefff77657fcf6bf99548bb5484fd4f36a6c85df0_amd64",
"8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:00dca2ca8b4defe3e6bb919696122db8f2075e839fdb6d7445dd6d04b88797d7_amd64",
"8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:5c60efa145579c65bf59b6d7b7049ae1878fa3975e79abbe3ad3ad0a66f45d96_amd64",
"8Base-Quay-3:quay/quay-operator-bundle@sha256:df44ff8686b925d1d67a4ec36f7f1cbdc5eda783eac9661c80aa19a2ae72c6b3_amd64",
"8Base-Quay-3:quay/quay-operator-rhel8@sha256:f49b8cd5c394da46fdcf0ef8d2ee2122f089fd44149ef09089d62b8597f82a0f_amd64",
"8Base-Quay-3:quay/quay-rhel8@sha256:9ab357534805da1d2e6e05d7c36f12c257ae6bb2745ceccec94218c0148d00a8_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"8Base-Quay-3:quay/clair-rhel8@sha256:4ccd0e8b2b9706570c794a4844e0ddd7d63de3f56a1fe68ca3502700fb1c6778_amd64",
"8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:ffb291a574f1af24e834facc8bc11812173baa1b008be27001529e940a15efc3_amd64",
"8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:3d77281f5665103a7d16c3e940c749264ec4fe97361fd92c7f28fe8319cdeeb8_amd64",
"8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:b324dc3a4a888b9706f862f780e7ad6d0d08e5a68261cf7abea0f089cad1be70_amd64",
"8Base-Quay-3:quay/quay-builder-rhel8@sha256:8f7a57dc1983f3a091120efbefff77657fcf6bf99548bb5484fd4f36a6c85df0_amd64",
"8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:00dca2ca8b4defe3e6bb919696122db8f2075e839fdb6d7445dd6d04b88797d7_amd64",
"8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:5c60efa145579c65bf59b6d7b7049ae1878fa3975e79abbe3ad3ad0a66f45d96_amd64",
"8Base-Quay-3:quay/quay-operator-bundle@sha256:df44ff8686b925d1d67a4ec36f7f1cbdc5eda783eac9661c80aa19a2ae72c6b3_amd64",
"8Base-Quay-3:quay/quay-operator-rhel8@sha256:f49b8cd5c394da46fdcf0ef8d2ee2122f089fd44149ef09089d62b8597f82a0f_amd64",
"8Base-Quay-3:quay/quay-rhel8@sha256:9ab357534805da1d2e6e05d7c36f12c257ae6bb2745ceccec94218c0148d00a8_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "gunicorn: HTTP Request Smuggling in benoitc/gunicorn"
},
{
"acknowledgments": [
{
"names": [
"jub0bs"
]
}
],
"cve": "CVE-2025-22868",
"cwe": {
"id": "CWE-1286",
"name": "Improper Validation of Syntactic Correctness of Input"
},
"discovery_date": "2025-02-26T04:00:44.350024+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2348366"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `golang.org/x/oauth2/jws` package in the token parsing component. This vulnerability is made possible because of the use of `strings.Split(token, \".\")` to split JWT tokens, which can lead to excessive memory consumption when processing maliciously crafted tokens with a large number of `.` characters. An attacker could exploit this functionality by sending numerous malformed tokens and can trigger memory exhaustion and a Denial of Service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in golang.org/x/oauth2/jws",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "IMPORTANT impact: CVE-2025-22868 affects Red Hat product components that use golang.org/x/oauth2/jws, including components across Red Hat Enterprise Linux, OpenShift, cloud, management, Ansible, Ceph, and other Red Hat products. An unauthenticated remote attacker can submit a maliciously crafted token containing a large number of \u0027.\u0027 characters; parsing with strings.Split(token, \".\") can consume excessive memory, causing memory exhaustion and denial of service. The current record contains 659 affected component entries, with component-level delegated outcomes including AFFECTED, NOTAFFECTED, WONTFIX, and OOSS; entries classified as NOTAFFECTED are therefore component-specific, and this record provides no more specific product-level justification for those classifications. The CVSS 3.1 score of 7.5 (IMPORTANT) reflects network reachability and a high availability impact, with no confidentiality or integrity impact.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-Quay-3:quay/clair-rhel8@sha256:4ccd0e8b2b9706570c794a4844e0ddd7d63de3f56a1fe68ca3502700fb1c6778_amd64",
"8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:ffb291a574f1af24e834facc8bc11812173baa1b008be27001529e940a15efc3_amd64",
"8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:3d77281f5665103a7d16c3e940c749264ec4fe97361fd92c7f28fe8319cdeeb8_amd64",
"8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:b324dc3a4a888b9706f862f780e7ad6d0d08e5a68261cf7abea0f089cad1be70_amd64",
"8Base-Quay-3:quay/quay-builder-rhel8@sha256:8f7a57dc1983f3a091120efbefff77657fcf6bf99548bb5484fd4f36a6c85df0_amd64",
"8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:00dca2ca8b4defe3e6bb919696122db8f2075e839fdb6d7445dd6d04b88797d7_amd64",
"8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:5c60efa145579c65bf59b6d7b7049ae1878fa3975e79abbe3ad3ad0a66f45d96_amd64",
"8Base-Quay-3:quay/quay-operator-bundle@sha256:df44ff8686b925d1d67a4ec36f7f1cbdc5eda783eac9661c80aa19a2ae72c6b3_amd64",
"8Base-Quay-3:quay/quay-operator-rhel8@sha256:f49b8cd5c394da46fdcf0ef8d2ee2122f089fd44149ef09089d62b8597f82a0f_amd64",
"8Base-Quay-3:quay/quay-rhel8@sha256:9ab357534805da1d2e6e05d7c36f12c257ae6bb2745ceccec94218c0148d00a8_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-22868"
},
{
"category": "external",
"summary": "RHBZ#2348366",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2348366"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-22868",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22868"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-22868",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-22868"
},
{
"category": "external",
"summary": "https://go.dev/cl/652155",
"url": "https://go.dev/cl/652155"
},
{
"category": "external",
"summary": "https://go.dev/issue/71490",
"url": "https://go.dev/issue/71490"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2025-3488",
"url": "https://pkg.go.dev/vuln/GO-2025-3488"
}
],
"release_date": "2025-02-26T03:07:49.012000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-04-30T13:59:28+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-Quay-3:quay/clair-rhel8@sha256:4ccd0e8b2b9706570c794a4844e0ddd7d63de3f56a1fe68ca3502700fb1c6778_amd64",
"8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:ffb291a574f1af24e834facc8bc11812173baa1b008be27001529e940a15efc3_amd64",
"8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:3d77281f5665103a7d16c3e940c749264ec4fe97361fd92c7f28fe8319cdeeb8_amd64",
"8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:b324dc3a4a888b9706f862f780e7ad6d0d08e5a68261cf7abea0f089cad1be70_amd64",
"8Base-Quay-3:quay/quay-builder-rhel8@sha256:8f7a57dc1983f3a091120efbefff77657fcf6bf99548bb5484fd4f36a6c85df0_amd64",
"8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:00dca2ca8b4defe3e6bb919696122db8f2075e839fdb6d7445dd6d04b88797d7_amd64",
"8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:5c60efa145579c65bf59b6d7b7049ae1878fa3975e79abbe3ad3ad0a66f45d96_amd64",
"8Base-Quay-3:quay/quay-operator-bundle@sha256:df44ff8686b925d1d67a4ec36f7f1cbdc5eda783eac9661c80aa19a2ae72c6b3_amd64",
"8Base-Quay-3:quay/quay-operator-rhel8@sha256:f49b8cd5c394da46fdcf0ef8d2ee2122f089fd44149ef09089d62b8597f82a0f_amd64",
"8Base-Quay-3:quay/quay-rhel8@sha256:9ab357534805da1d2e6e05d7c36f12c257ae6bb2745ceccec94218c0148d00a8_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHBA-2025:3538"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, it is recommended to pre-validate any payloads passed to `go-jose` to check that they do not contain an excessive amount of `.` characters.",
"product_ids": [
"8Base-Quay-3:quay/clair-rhel8@sha256:4ccd0e8b2b9706570c794a4844e0ddd7d63de3f56a1fe68ca3502700fb1c6778_amd64",
"8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:ffb291a574f1af24e834facc8bc11812173baa1b008be27001529e940a15efc3_amd64",
"8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:3d77281f5665103a7d16c3e940c749264ec4fe97361fd92c7f28fe8319cdeeb8_amd64",
"8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:b324dc3a4a888b9706f862f780e7ad6d0d08e5a68261cf7abea0f089cad1be70_amd64",
"8Base-Quay-3:quay/quay-builder-rhel8@sha256:8f7a57dc1983f3a091120efbefff77657fcf6bf99548bb5484fd4f36a6c85df0_amd64",
"8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:00dca2ca8b4defe3e6bb919696122db8f2075e839fdb6d7445dd6d04b88797d7_amd64",
"8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:5c60efa145579c65bf59b6d7b7049ae1878fa3975e79abbe3ad3ad0a66f45d96_amd64",
"8Base-Quay-3:quay/quay-operator-bundle@sha256:df44ff8686b925d1d67a4ec36f7f1cbdc5eda783eac9661c80aa19a2ae72c6b3_amd64",
"8Base-Quay-3:quay/quay-operator-rhel8@sha256:f49b8cd5c394da46fdcf0ef8d2ee2122f089fd44149ef09089d62b8597f82a0f_amd64",
"8Base-Quay-3:quay/quay-rhel8@sha256:9ab357534805da1d2e6e05d7c36f12c257ae6bb2745ceccec94218c0148d00a8_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"8Base-Quay-3:quay/clair-rhel8@sha256:4ccd0e8b2b9706570c794a4844e0ddd7d63de3f56a1fe68ca3502700fb1c6778_amd64",
"8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:ffb291a574f1af24e834facc8bc11812173baa1b008be27001529e940a15efc3_amd64",
"8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:3d77281f5665103a7d16c3e940c749264ec4fe97361fd92c7f28fe8319cdeeb8_amd64",
"8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:b324dc3a4a888b9706f862f780e7ad6d0d08e5a68261cf7abea0f089cad1be70_amd64",
"8Base-Quay-3:quay/quay-builder-rhel8@sha256:8f7a57dc1983f3a091120efbefff77657fcf6bf99548bb5484fd4f36a6c85df0_amd64",
"8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:00dca2ca8b4defe3e6bb919696122db8f2075e839fdb6d7445dd6d04b88797d7_amd64",
"8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:5c60efa145579c65bf59b6d7b7049ae1878fa3975e79abbe3ad3ad0a66f45d96_amd64",
"8Base-Quay-3:quay/quay-operator-bundle@sha256:df44ff8686b925d1d67a4ec36f7f1cbdc5eda783eac9661c80aa19a2ae72c6b3_amd64",
"8Base-Quay-3:quay/quay-operator-rhel8@sha256:f49b8cd5c394da46fdcf0ef8d2ee2122f089fd44149ef09089d62b8597f82a0f_amd64",
"8Base-Quay-3:quay/quay-rhel8@sha256:9ab357534805da1d2e6e05d7c36f12c257ae6bb2745ceccec94218c0148d00a8_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in golang.org/x/oauth2/jws"
},
{
"cve": "CVE-2025-22869",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2025-02-26T04:00:47.683125+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2348367"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the golang.org/x/crypto/ssh package. SSH clients and servers are vulnerable to increased resource consumption, possibly leading to memory exhaustion and a DoS. This can occur during key exchange when the other party is slow to respond during key exchange.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "While this flaw affects both SSH clients and servers implemented with golang.org/x/crypto/ssh, realistically the flaw will only lead to a DoS when transferring large files, greatly reducing the likelihood of exploitation.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-Quay-3:quay/clair-rhel8@sha256:4ccd0e8b2b9706570c794a4844e0ddd7d63de3f56a1fe68ca3502700fb1c6778_amd64",
"8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:ffb291a574f1af24e834facc8bc11812173baa1b008be27001529e940a15efc3_amd64",
"8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:3d77281f5665103a7d16c3e940c749264ec4fe97361fd92c7f28fe8319cdeeb8_amd64",
"8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:b324dc3a4a888b9706f862f780e7ad6d0d08e5a68261cf7abea0f089cad1be70_amd64",
"8Base-Quay-3:quay/quay-builder-rhel8@sha256:8f7a57dc1983f3a091120efbefff77657fcf6bf99548bb5484fd4f36a6c85df0_amd64",
"8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:00dca2ca8b4defe3e6bb919696122db8f2075e839fdb6d7445dd6d04b88797d7_amd64",
"8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:5c60efa145579c65bf59b6d7b7049ae1878fa3975e79abbe3ad3ad0a66f45d96_amd64",
"8Base-Quay-3:quay/quay-operator-bundle@sha256:df44ff8686b925d1d67a4ec36f7f1cbdc5eda783eac9661c80aa19a2ae72c6b3_amd64",
"8Base-Quay-3:quay/quay-operator-rhel8@sha256:f49b8cd5c394da46fdcf0ef8d2ee2122f089fd44149ef09089d62b8597f82a0f_amd64",
"8Base-Quay-3:quay/quay-rhel8@sha256:9ab357534805da1d2e6e05d7c36f12c257ae6bb2745ceccec94218c0148d00a8_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-22869"
},
{
"category": "external",
"summary": "RHBZ#2348367",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2348367"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-22869",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22869"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-22869",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-22869"
},
{
"category": "external",
"summary": "https://go.dev/cl/652135",
"url": "https://go.dev/cl/652135"
},
{
"category": "external",
"summary": "https://go.dev/issue/71931",
"url": "https://go.dev/issue/71931"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2025-3487",
"url": "https://pkg.go.dev/vuln/GO-2025-3487"
}
],
"release_date": "2025-02-26T03:07:48.855000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-04-30T13:59:28+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-Quay-3:quay/clair-rhel8@sha256:4ccd0e8b2b9706570c794a4844e0ddd7d63de3f56a1fe68ca3502700fb1c6778_amd64",
"8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:ffb291a574f1af24e834facc8bc11812173baa1b008be27001529e940a15efc3_amd64",
"8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:3d77281f5665103a7d16c3e940c749264ec4fe97361fd92c7f28fe8319cdeeb8_amd64",
"8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:b324dc3a4a888b9706f862f780e7ad6d0d08e5a68261cf7abea0f089cad1be70_amd64",
"8Base-Quay-3:quay/quay-builder-rhel8@sha256:8f7a57dc1983f3a091120efbefff77657fcf6bf99548bb5484fd4f36a6c85df0_amd64",
"8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:00dca2ca8b4defe3e6bb919696122db8f2075e839fdb6d7445dd6d04b88797d7_amd64",
"8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:5c60efa145579c65bf59b6d7b7049ae1878fa3975e79abbe3ad3ad0a66f45d96_amd64",
"8Base-Quay-3:quay/quay-operator-bundle@sha256:df44ff8686b925d1d67a4ec36f7f1cbdc5eda783eac9661c80aa19a2ae72c6b3_amd64",
"8Base-Quay-3:quay/quay-operator-rhel8@sha256:f49b8cd5c394da46fdcf0ef8d2ee2122f089fd44149ef09089d62b8597f82a0f_amd64",
"8Base-Quay-3:quay/quay-rhel8@sha256:9ab357534805da1d2e6e05d7c36f12c257ae6bb2745ceccec94218c0148d00a8_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHBA-2025:3538"
},
{
"category": "workaround",
"details": "This flaw can be mitigated when using the client only connecting to trusted servers.",
"product_ids": [
"8Base-Quay-3:quay/clair-rhel8@sha256:4ccd0e8b2b9706570c794a4844e0ddd7d63de3f56a1fe68ca3502700fb1c6778_amd64",
"8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:ffb291a574f1af24e834facc8bc11812173baa1b008be27001529e940a15efc3_amd64",
"8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:3d77281f5665103a7d16c3e940c749264ec4fe97361fd92c7f28fe8319cdeeb8_amd64",
"8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:b324dc3a4a888b9706f862f780e7ad6d0d08e5a68261cf7abea0f089cad1be70_amd64",
"8Base-Quay-3:quay/quay-builder-rhel8@sha256:8f7a57dc1983f3a091120efbefff77657fcf6bf99548bb5484fd4f36a6c85df0_amd64",
"8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:00dca2ca8b4defe3e6bb919696122db8f2075e839fdb6d7445dd6d04b88797d7_amd64",
"8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:5c60efa145579c65bf59b6d7b7049ae1878fa3975e79abbe3ad3ad0a66f45d96_amd64",
"8Base-Quay-3:quay/quay-operator-bundle@sha256:df44ff8686b925d1d67a4ec36f7f1cbdc5eda783eac9661c80aa19a2ae72c6b3_amd64",
"8Base-Quay-3:quay/quay-operator-rhel8@sha256:f49b8cd5c394da46fdcf0ef8d2ee2122f089fd44149ef09089d62b8597f82a0f_amd64",
"8Base-Quay-3:quay/quay-rhel8@sha256:9ab357534805da1d2e6e05d7c36f12c257ae6bb2745ceccec94218c0148d00a8_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"8Base-Quay-3:quay/clair-rhel8@sha256:4ccd0e8b2b9706570c794a4844e0ddd7d63de3f56a1fe68ca3502700fb1c6778_amd64",
"8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:ffb291a574f1af24e834facc8bc11812173baa1b008be27001529e940a15efc3_amd64",
"8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:3d77281f5665103a7d16c3e940c749264ec4fe97361fd92c7f28fe8319cdeeb8_amd64",
"8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:b324dc3a4a888b9706f862f780e7ad6d0d08e5a68261cf7abea0f089cad1be70_amd64",
"8Base-Quay-3:quay/quay-builder-rhel8@sha256:8f7a57dc1983f3a091120efbefff77657fcf6bf99548bb5484fd4f36a6c85df0_amd64",
"8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:00dca2ca8b4defe3e6bb919696122db8f2075e839fdb6d7445dd6d04b88797d7_amd64",
"8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:5c60efa145579c65bf59b6d7b7049ae1878fa3975e79abbe3ad3ad0a66f45d96_amd64",
"8Base-Quay-3:quay/quay-operator-bundle@sha256:df44ff8686b925d1d67a4ec36f7f1cbdc5eda783eac9661c80aa19a2ae72c6b3_amd64",
"8Base-Quay-3:quay/quay-operator-rhel8@sha256:f49b8cd5c394da46fdcf0ef8d2ee2122f089fd44149ef09089d62b8597f82a0f_amd64",
"8Base-Quay-3:quay/quay-rhel8@sha256:9ab357534805da1d2e6e05d7c36f12c257ae6bb2745ceccec94218c0148d00a8_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh"
},
{
"cve": "CVE-2025-27516",
"cwe": {
"id": "CWE-1336",
"name": "Improper Neutralization of Special Elements Used in a Template Engine"
},
"discovery_date": "2025-03-05T21:01:07.674606+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2350190"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Jinja. In affected versions, an oversight in how the Jinja sandboxed environment interacts with the `|attr` filter allows an attacker who controls the content of a template to execute arbitrary Python code. To exploit the vulnerability, an attacker needs to control the content of a template. Whether that is the case depends on the type of application using Jinja. This vulnerability impacts users of applications that execute untrusted templates. Jinja\u0027s sandbox does catch calls to `str.format` and ensures they don\u0027t escape the sandbox. However, it\u0027s possible to use the `|attr` filter to get a reference to a string\u0027s plain format method, bypassing the sandbox.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jinja2: Jinja sandbox breakout through attr filter selecting format method",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as important severity due to the potential for an attacker to bypass Jinja\u0027s sandbox by exploiting the |attr filter, by controlling template content, an attacker can execute arbitrary Python code, impacting the integrity, confidentiality, and availability of the system. While the attack requires user interaction to trigger untrusted templates, the risk is significant in applications that allow such templates to be executed.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-Quay-3:quay/clair-rhel8@sha256:4ccd0e8b2b9706570c794a4844e0ddd7d63de3f56a1fe68ca3502700fb1c6778_amd64",
"8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:ffb291a574f1af24e834facc8bc11812173baa1b008be27001529e940a15efc3_amd64",
"8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:3d77281f5665103a7d16c3e940c749264ec4fe97361fd92c7f28fe8319cdeeb8_amd64",
"8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:b324dc3a4a888b9706f862f780e7ad6d0d08e5a68261cf7abea0f089cad1be70_amd64",
"8Base-Quay-3:quay/quay-builder-rhel8@sha256:8f7a57dc1983f3a091120efbefff77657fcf6bf99548bb5484fd4f36a6c85df0_amd64",
"8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:00dca2ca8b4defe3e6bb919696122db8f2075e839fdb6d7445dd6d04b88797d7_amd64",
"8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:5c60efa145579c65bf59b6d7b7049ae1878fa3975e79abbe3ad3ad0a66f45d96_amd64",
"8Base-Quay-3:quay/quay-operator-bundle@sha256:df44ff8686b925d1d67a4ec36f7f1cbdc5eda783eac9661c80aa19a2ae72c6b3_amd64",
"8Base-Quay-3:quay/quay-operator-rhel8@sha256:f49b8cd5c394da46fdcf0ef8d2ee2122f089fd44149ef09089d62b8597f82a0f_amd64",
"8Base-Quay-3:quay/quay-rhel8@sha256:9ab357534805da1d2e6e05d7c36f12c257ae6bb2745ceccec94218c0148d00a8_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-27516"
},
{
"category": "external",
"summary": "RHBZ#2350190",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2350190"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-27516",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-27516"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-27516",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-27516"
},
{
"category": "external",
"summary": "https://github.com/pallets/jinja/commit/90457bbf33b8662926ae65cdde4c4c32e756e403",
"url": "https://github.com/pallets/jinja/commit/90457bbf33b8662926ae65cdde4c4c32e756e403"
},
{
"category": "external",
"summary": "https://github.com/pallets/jinja/security/advisories/GHSA-cpwx-vrp4-4pq7",
"url": "https://github.com/pallets/jinja/security/advisories/GHSA-cpwx-vrp4-4pq7"
}
],
"release_date": "2025-03-05T20:40:06.568000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2025-04-30T13:59:28+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-Quay-3:quay/clair-rhel8@sha256:4ccd0e8b2b9706570c794a4844e0ddd7d63de3f56a1fe68ca3502700fb1c6778_amd64",
"8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:ffb291a574f1af24e834facc8bc11812173baa1b008be27001529e940a15efc3_amd64",
"8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:3d77281f5665103a7d16c3e940c749264ec4fe97361fd92c7f28fe8319cdeeb8_amd64",
"8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:b324dc3a4a888b9706f862f780e7ad6d0d08e5a68261cf7abea0f089cad1be70_amd64",
"8Base-Quay-3:quay/quay-builder-rhel8@sha256:8f7a57dc1983f3a091120efbefff77657fcf6bf99548bb5484fd4f36a6c85df0_amd64",
"8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:00dca2ca8b4defe3e6bb919696122db8f2075e839fdb6d7445dd6d04b88797d7_amd64",
"8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:5c60efa145579c65bf59b6d7b7049ae1878fa3975e79abbe3ad3ad0a66f45d96_amd64",
"8Base-Quay-3:quay/quay-operator-bundle@sha256:df44ff8686b925d1d67a4ec36f7f1cbdc5eda783eac9661c80aa19a2ae72c6b3_amd64",
"8Base-Quay-3:quay/quay-operator-rhel8@sha256:f49b8cd5c394da46fdcf0ef8d2ee2122f089fd44149ef09089d62b8597f82a0f_amd64",
"8Base-Quay-3:quay/quay-rhel8@sha256:9ab357534805da1d2e6e05d7c36f12c257ae6bb2745ceccec94218c0148d00a8_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHBA-2025:3538"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"8Base-Quay-3:quay/clair-rhel8@sha256:4ccd0e8b2b9706570c794a4844e0ddd7d63de3f56a1fe68ca3502700fb1c6778_amd64",
"8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:ffb291a574f1af24e834facc8bc11812173baa1b008be27001529e940a15efc3_amd64",
"8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:3d77281f5665103a7d16c3e940c749264ec4fe97361fd92c7f28fe8319cdeeb8_amd64",
"8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:b324dc3a4a888b9706f862f780e7ad6d0d08e5a68261cf7abea0f089cad1be70_amd64",
"8Base-Quay-3:quay/quay-builder-rhel8@sha256:8f7a57dc1983f3a091120efbefff77657fcf6bf99548bb5484fd4f36a6c85df0_amd64",
"8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:00dca2ca8b4defe3e6bb919696122db8f2075e839fdb6d7445dd6d04b88797d7_amd64",
"8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:5c60efa145579c65bf59b6d7b7049ae1878fa3975e79abbe3ad3ad0a66f45d96_amd64",
"8Base-Quay-3:quay/quay-operator-bundle@sha256:df44ff8686b925d1d67a4ec36f7f1cbdc5eda783eac9661c80aa19a2ae72c6b3_amd64",
"8Base-Quay-3:quay/quay-operator-rhel8@sha256:f49b8cd5c394da46fdcf0ef8d2ee2122f089fd44149ef09089d62b8597f82a0f_amd64",
"8Base-Quay-3:quay/quay-rhel8@sha256:9ab357534805da1d2e6e05d7c36f12c257ae6bb2745ceccec94218c0148d00a8_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"8Base-Quay-3:quay/clair-rhel8@sha256:4ccd0e8b2b9706570c794a4844e0ddd7d63de3f56a1fe68ca3502700fb1c6778_amd64",
"8Base-Quay-3:quay/quay-bridge-operator-bundle@sha256:ffb291a574f1af24e834facc8bc11812173baa1b008be27001529e940a15efc3_amd64",
"8Base-Quay-3:quay/quay-bridge-operator-rhel8@sha256:3d77281f5665103a7d16c3e940c749264ec4fe97361fd92c7f28fe8319cdeeb8_amd64",
"8Base-Quay-3:quay/quay-builder-qemu-rhcos-rhel8@sha256:b324dc3a4a888b9706f862f780e7ad6d0d08e5a68261cf7abea0f089cad1be70_amd64",
"8Base-Quay-3:quay/quay-builder-rhel8@sha256:8f7a57dc1983f3a091120efbefff77657fcf6bf99548bb5484fd4f36a6c85df0_amd64",
"8Base-Quay-3:quay/quay-container-security-operator-bundle@sha256:00dca2ca8b4defe3e6bb919696122db8f2075e839fdb6d7445dd6d04b88797d7_amd64",
"8Base-Quay-3:quay/quay-container-security-operator-rhel8@sha256:5c60efa145579c65bf59b6d7b7049ae1878fa3975e79abbe3ad3ad0a66f45d96_amd64",
"8Base-Quay-3:quay/quay-operator-bundle@sha256:df44ff8686b925d1d67a4ec36f7f1cbdc5eda783eac9661c80aa19a2ae72c6b3_amd64",
"8Base-Quay-3:quay/quay-operator-rhel8@sha256:f49b8cd5c394da46fdcf0ef8d2ee2122f089fd44149ef09089d62b8597f82a0f_amd64",
"8Base-Quay-3:quay/quay-rhel8@sha256:9ab357534805da1d2e6e05d7c36f12c257ae6bb2745ceccec94218c0148d00a8_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "jinja2: Jinja sandbox breakout through attr filter selecting format method"
}
]
}
Loading…
Loading…
Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline
Sightings and recorded dates, grouped by day · UTC
How durations are calculated
Following the VTEM framework (Black Hat USA 2015), time to patch starts when the vendor or a coordinator was informed, total time to patch at discovery, and disclosure to patch at public disclosure; vendor response time runs from the report to its acknowledgement. Time to exploit and time unpatched start at the earliest discovery or report, falling back to public disclosure. Unpatched time ends at the first recorded patch, or the calculation time when no patch is recorded. Exploitation to patch shows the interval between those two events; a published proof of concept is a public exploit, not exploitation.
Each result shows its source dates. A negative interval means the end event came first; when date-only inputs leave the order open, the result says so. Date-only inputs are approximate. The earliest evidence wins: KEV report dates and sightings are labelled as such. Records describing another vulnerability are listed but never calculated from, and a PoC alone does not establish exploitation. Missing patch evidence does not prove that no patch exists. Filters below change the event list only.
Loading timeline…
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.