Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
stems from the multipart form data and JSON request handlers, which automatically download files from user-provided URLs without validating whether those URLs point to internal network addresses, cloud metadata endpoints, or other restricted resources. The documentation explicitly promotes this URL-based file upload feature, making it an intended design that exposes all deployed services to SSRF attacks by default. Version 1.4.19 contains a patch for the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/bentoml/BentoML/security/advisories/GHSA-mrmq-3q62-6cc8 - https://github.com/bentoml/BentoML/commit/534c3584621da4ab954bdc3d814cc66b95ae5fb8
CVE ID: CVE-2025-54382 State: PUBLISHED Published: 2025-08-13T13:31:13.532Z Last Updated: 2025-08-13T14:10:43.740Z Severity: CRITICAL (CVSS 9.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: CherryHQ Products: cherry-studio Problem Types: CWE-78 Description: Cherry Studio is a desktop client that supports for multiple LLM providers. In version 1.5.1, a remote code execution (RCE) vulnerability exists in the Cherry Studio platform when connecting to streamableHttp MCP servers. The issue arises from the server’s implicit trust in the oauth auth redirection endpoints and failure to properly sanitize the URL. This issue has been patched in version 1.5.2. Additional Analyst Notes: - CISA
nd failure to properly sanitize the URL. This issue has been patched in version 1.5.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/CherryHQ/cherry-studio/security/advisories/GHSA-gjp6-9cvg-8w93
CVE ID: CVE-2025-54384 State: PUBLISHED Published: 2025-10-29T15:26:38.426Z Last Updated: 2025-10-29T17:41:12.571Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:N) Vendors: ckan Products: ckan Problem Types: CWE-79 Description: CKAN is an open-source DMS (data management system) for powering data hubs and data portals. Prior to 2.10.9 and 2.11.4, the helpers.markdown_extract() function did not perform sufficient sanitization of input data before wrapping in an HTML literal element. This helper is used to render user-provided data on dataset, resource, organization or group pages (plus any page provided by an extension that used that helper function), leading to a pote
, organization or group pages (plus any page provided by an extension that used that helper function), leading to a potential XSS vector. This vulnerability has been fixed in CKAN 2.10.9 and 2.11.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/ckan/ckan/security/advisories/GHSA-2r4h-8jxv-w2j8 - https://github.com/ckan/ckan/commit/6d0065f2fc7e2682196d125275af34b93e9e554e
CVE ID: CVE-2025-54385 State: PUBLISHED Published: 2025-07-26T03:28:49.269Z Last Updated: 2025-07-28T18:59:22.894Z Vendors: xwiki Products: xwiki-platform Problem Types: CWE-20 Description: XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions between 17.0.0-rc1 to 17.2.2 and versions 16.10.5 and below, it's possible to execute any SQL query in Oracle by using the function like DBMS_XMLGEN or DBMS_XMLQUERY. The XWiki#searchDocuments APIs pass queries directly to Hibernate without sanitization. Even when these APIs enforce a specific SELECT clause, attackers can still inject malicious code through HQL's native function support in
Is enforce a specific SELECT clause, attackers can still inject malicious code through HQL's native function support in other parts of the query (such as the WHERE clause). This is fixed in versions 16.10.6 and 17.3.0-rc-1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-p9qm-p942-q3w5 - https://github.com/xwiki/xwiki-platform/commit/7313dc9b533c70f14b7672379c8b3b63d1fd8f51 - https://github.com/xwiki/xwiki-platform/commit/7c4087d44ac550610b2fa413dd4f5375409265a5 - https://docs.oracle.com/en/database/oracle/oracle-database/19/arpls/DBMS_XMLGEN.html - https://jira.xwiki.org/browse/XWIKI-22728 - https://www.xwiki.
tabase/oracle/oracle-database/19/arpls/DBMS_XMLGEN.html - https://jira.xwiki.org/browse/XWIKI-22728 - https://www.xwiki.org/xwiki/bin/view/ReleaseNotes/Data/XWiki/16.10.6
CVE ID: CVE-2025-54386 State: PUBLISHED Published: 2025-08-01T23:32:21.747Z Last Updated: 2025-08-04T15:28:06.189Z Vendors: traefik Products: traefik Problem Types: CWE-22, CWE-30 Description: Traefik is an HTTP reverse proxy and load balancer. In versions 2.11.27 and below, 3.0.0 through 3.4.4 and 3.5.0-rc1, a path traversal vulnerability was discovered in WASM Traefik’s plugin installation mechanism. By supplying a maliciously crafted ZIP archive containing file paths with ../ sequences, an attacker can overwrite arbitrary files on the system outside of the intended plugin directory. This can lead to remote code execution (RCE), privilege escalation, persistence, or denial of service. This
n directory. This can lead to remote code execution (RCE), privilege escalation, persistence, or denial of service. This is fixed in versions 2.11.28, 3.4.5 and 3.5.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/traefik/traefik/security/advisories/GHSA-q6gg-9f92-r9wg - https://github.com/traefik/plugin-service/pull/71 - https://github.com/traefik/plugin-service/pull/72 - https://github.com/traefik/traefik/pull/11911 - https://github.com/traefik/traefik/commit/5ef853a0c53068f69a6c229a5815a0dc6e0a8800 - https://github.com/traefik/traefik/releases/tag/v2.11.28
CVE ID: CVE-2025-54387 State: PUBLISHED Published: 2025-08-05T00:10:26.442Z Last Updated: 2025-08-05T14:11:59.162Z Vendors: unjs Products: ipx Problem Types: CWE-22 Description: IPX is an image optimizer powered by sharp and svgo. In versions 1.3.1 and below, 2.0.0-0 through 2.1.0, and 3.0.0 through 3.1.0, the approach used to check whether a path is within allowed directories is vulnerable to path prefix bypass when the allowed directories do not end with a path separator. This occurs because the check relies on a raw string prefix comparison. This is fixed in versions 1.3.2, 2.1.1 and 3.1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/unjs/ipx/securi
.2, 2.1.1 and 3.1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/unjs/ipx/security/advisories/GHSA-mm3p-j368-7jcr - https://github.com/unjs/ipx/commit/81693ddbfc062cc922e4e2406e8427ab4e3ad214 - https://github.com/unjs/ipx/releases/tag/v1.3.2 - https://github.com/unjs/ipx/releases/tag/v2.1.1 - https://github.com/unjs/ipx/releases/tag/v3.1.1
CVE ID: CVE-2025-54388 State: PUBLISHED Published: 2025-07-30T13:24:06.849Z Last Updated: 2025-07-30T13:38:07.559Z Vendors: moby Products: moby Problem Types: CWE-909 Description: Moby is an open source container framework developed by Docker Inc. that is distributed as Docker Engine, Mirantis Container Runtime, and various other downstream projects/products. In versions 28.2.0 through 28.3.2, when the firewalld service is reloaded it removes all iptables rules including those created by Docker. While Docker should automatically recreate these rules, versions before 28.3.3 fail to recreate the specific rules that block external access to containers. This means that after a firewalld reload,
fail to recreate the specific rules that block external access to containers. This means that after a firewalld reload, containers with ports published to localhost (like 127.0.0.1:8080) become accessible from remote machines that have network routing to the Docker bridge, even though they should only be accessible from the host itself. The vulnerability only affects explicitly published ports - unpublished ports remain protected. This issue is fixed in version 28.3.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/moby/moby/security/advisories/GHSA-x4rx-4gw3-53p4 - https://github.com/moby/moby/pull/50506 - https://github.com/moby/moby/commit/bea959c7b793
isories/GHSA-x4rx-4gw3-53p4 - https://github.com/moby/moby/pull/50506 - https://github.com/moby/moby/commit/bea959c7b793b32a893820b97c4eadc7c87fabb0
CVE ID: CVE-2025-54389 State: PUBLISHED Published: 2025-08-14T15:53:42.393Z Last Updated: 2025-11-04T21:12:45.162Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: aide Products: aide Problem Types: CWE-117 Description: AIDE is an advanced intrusion detection environment. Prior to version 0.19.2, there is an improper output neutralization vulnerability in AIDE. An attacker can craft a malicious filename by including terminal escape sequences to hide the addition or removal of the file from the report and/or tamper with the log output. A local user might exploit this to bypass the AIDE detection of malicious files. Additionally the output of extended attribute
l user might exploit this to bypass the AIDE detection of malicious files. Additionally the output of extended attribute key names and symbolic links targets are also not properly neutralized. This issue has been patched in version 0.19.2. A workaround involves configuring AIDE to write the report output to a regular file, redirecting stdout to a regular file, or redirecting the log output written to stderr to a regular file. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/aide/aide/security/advisories/GHSA-522j-vvx9-gg28 - https://github.com/aide/aide/commit/64c8f32b0349c33fb8382784af468338078851f9 - https://github.com/aide/aide/r
vx9-gg28 - https://github.com/aide/aide/commit/64c8f32b0349c33fb8382784af468338078851f9 - https://github.com/aide/aide/releases/tag/v0.19.2
CVE ID: CVE-2025-54390 State: PUBLISHED Published: 2025-09-17T00:00:00.000Z Last Updated: 2025-09-17T15:03:02.676Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross-Site Request Forgery (CSRF) vulnerability exists in the ResetPasswordRequest operation of Zimbra Collaboration (ZCS) when the zimbraFeatureResetPasswordStatus attribute is enabled. An attacker can exploit this by tricking an authenticated user into visiting a malicious webpage that silently sends a crafted SOAP request to reset the user's password. The vulnerability stems from a lack of CSRF token validation on the endpoint, allowing password resets without the user's consent. Additional Analyst Notes: - CISA ADP
en validation on the endpoint, allowing password resets without the user's consent. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories - https://wiki.zimbra.com/wiki/Security_Center - https://wiki.zimbra.com/wiki/Zimbra_Responsible_Disclosure_Policy
CVE ID: CVE-2025-54391 State: PUBLISHED Published: 2025-09-16T00:00:00.000Z Last Updated: 2025-09-17T13:57:52.062Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability in the EnableTwoFactorAuthRequest SOAP endpoint of Zimbra Collaboration (ZCS) allows an attacker with valid user credentials to bypass Two-Factor Authentication (2FA) protection. The attacker can configure an additional 2FA method (either a third-party authenticator app or email-based 2FA) without presenting a valid authentication token or proving access to an already configured 2FA method. This bypasses 2FA and results in unauthorized access to accounts that are otherwise protected by 2FA. Additional Ana
od. This bypasses 2FA and results in unauthorized access to accounts that are otherwise protected by 2FA. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories - https://wiki.zimbra.com/wiki/Security_Center - https://wiki.zimbra.com/wiki/Zimbra_Responsible_Disclosure_Policy
CVE ID: CVE-2025-54392 State: PUBLISHED Published: 2025-08-07T00:00:00.000Z Last Updated: 2025-08-07T20:29:57.785Z Vendors: n/a Products: n/a Problem Types: n/a Description: Netwrix Directory Manager (formerly Imanami GroupID) 11.0.0.0 before 11.1.25162.02 allows XSS for authentication error data, a different vulnerability than CVE-2025-47189. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://community.netwrix.com/t/adv-2025-015-critical-vulnerabilities-in-netwrix-directory-manager-formerly-imanami-groupid-v11/17192
CVE ID: CVE-2025-54393 State: PUBLISHED Published: 2025-08-07T00:00:00.000Z Last Updated: 2025-08-07T20:30:52.698Z Vendors: n/a Products: n/a Problem Types: n/a Description: Netwrix Directory Manager (formerly Imanami GroupID) 11.0.0.0 before 11.1.25162.02 allows Static Code Injection. Authenticated users can obtain administrative access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://community.netwrix.com/t/adv-2025-015-critical-vulnerabilities-in-netwrix-directory-manager-formerly-imanami-groupid-v11/17192
CVE ID: CVE-2025-54394 State: PUBLISHED Published: 2025-08-07T00:00:00.000Z Last Updated: 2025-08-07T20:31:41.509Z Vendors: n/a Products: n/a Problem Types: n/a Description: Netwrix Directory Manager (formerly Imanami GroupID) 11.0.0.0 before 11.1.25162.02 has Insufficiently Protected Credentials for requests to remote Excel resources. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://community.netwrix.com/t/adv-2025-015-critical-vulnerabilities-in-netwrix-directory-manager-formerly-imanami-groupid-v11/17192
CVE ID: CVE-2025-54395 State: PUBLISHED Published: 2025-08-07T00:00:00.000Z Last Updated: 2025-08-07T20:32:33.735Z Vendors: n/a Products: n/a Problem Types: n/a Description: Netwrix Directory Manager (formerly Imanami GroupID) 11.0.0.0 before 11.1.25162.02 allows XSS for authentication configuration data. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://community.netwrix.com/t/adv-2025-015-critical-vulnerabilities-in-netwrix-directory-manager-formerly-imanami-groupid-v11/17192
CVE ID: CVE-2025-54396 State: PUBLISHED Published: 2025-08-07T00:00:00.000Z Last Updated: 2025-08-07T20:33:17.164Z Vendors: n/a Products: n/a Problem Types: n/a Description: Netwrix Directory Manager (formerly Imanami GroupID) 11.0.0.0 before 11.1.25162.02 allows SQL Injection. Authenticated users can exploit this. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://community.netwrix.com/t/adv-2025-015-critical-vulnerabilities-in-netwrix-directory-manager-formerly-imanami-groupid-v11/17192
CVE ID: CVE-2025-54397 State: PUBLISHED Published: 2025-08-07T00:00:00.000Z Last Updated: 2025-08-07T20:34:20.631Z Vendors: n/a Products: n/a Problem Types: n/a Description: Netwrix Directory Manager (formerly Imanami GroupID) 11.0.0.0 before 11.1.25162.02 inserts Sensitive Information Into Sent Data to authenticated users. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://community.netwrix.com/t/adv-2025-015-critical-vulnerabilities-in-netwrix-directory-manager-formerly-imanami-groupid-v11/17192
CVE ID: CVE-2025-54399 State: PUBLISHED Published: 2025-10-07T13:55:09.891Z Last Updated: 2025-11-03T17:45:03.319Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Planet Products: WGR-500 Problem Types: CWE-121 Description: Multiple stack-based buffer overflow vulnerabilities exist in the formPingCmd functionality of Planet WGR-500 v1.3411b190912. A specially crafted series of HTTP requests can lead to stack-based buffer overflow. An attacker can send a series of HTTP requests to trigger these vulnerabilities.This buffer overflow is related to the `ipaddr` request parameter for composing the `"ping -c <counts> <ipaddr> 2>&1 > %s &"` string. Additional Analyst
o the `ipaddr` request parameter for composing the `"ping -c <counts> <ipaddr> 2>&1 > %s &"` string. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2025-2226
CVE ID: CVE-2025-54400 State: PUBLISHED Published: 2025-10-07T13:55:10.308Z Last Updated: 2025-11-03T17:45:04.274Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Planet Products: WGR-500 Problem Types: CWE-121 Description: Multiple stack-based buffer overflow vulnerabilities exist in the formPingCmd functionality of Planet WGR-500 v1.3411b190912. A specially crafted series of HTTP requests can lead to stack-based buffer overflow. An attacker can send a series of HTTP requests to trigger these vulnerabilities.This buffer overflow is related to the `counts` request parameter for composing the `"ping -c <counts> <ipaddr> 2>&1 > %s &"` string. Additional Analyst
o the `counts` request parameter for composing the `"ping -c <counts> <ipaddr> 2>&1 > %s &"` string. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2025-2226
CVE ID: CVE-2025-54401 State: PUBLISHED Published: 2025-10-07T13:55:10.615Z Last Updated: 2025-11-03T17:45:05.277Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Planet Products: WGR-500 Problem Types: CWE-121 Description: Multiple stack-based buffer overflow vulnerabilities exist in the formPingCmd functionality of Planet WGR-500 v1.3411b190912. A specially crafted series of HTTP requests can lead to stack-based buffer overflow. An attacker can send a series of HTTP requests to trigger these vulnerabilities.This buffer overflow is related to the `submit-url` request parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: Refere
o the `submit-url` request parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2025-2226
CVE ID: CVE-2025-54402 State: PUBLISHED Published: 2025-10-07T13:55:10.827Z Last Updated: 2025-11-03T17:45:06.312Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Planet Products: WGR-500 Problem Types: CWE-121 Description: Multiple stack-based buffer overflow vulnerabilities exist in the formPingCmd functionality of Planet WGR-500 v1.3411b190912. A specially crafted series of HTTP requests can lead to stack-based buffer overflow. An attacker can send a series of HTTP requests to trigger these vulnerabilities.This buffer overflow is related to the `submit-url` and `ipaddr` request parameters combined. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Pr
o the `submit-url` and `ipaddr` request parameters combined. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2025-2226
CVE ID: CVE-2025-54403 State: PUBLISHED Published: 2025-10-07T13:55:07.948Z Last Updated: 2025-11-03T17:45:07.266Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Planet Products: WGR-500 Problem Types: CWE-78 Description: Multiple OS command injection vulnerabilities exist in the swctrl functionality of Planet WGR-500 v1.3411b190912. A specially crafted network request can lead to arbitrary command execution. An attacker can send a network request to trigger these vulnerabilities.This command injection is related to the `new_password` request parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosinte
t parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2025-2227
CVE ID: CVE-2025-54404 State: PUBLISHED Published: 2025-10-07T13:55:08.258Z Last Updated: 2025-11-03T17:45:08.205Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Planet Products: WGR-500 Problem Types: CWE-78 Description: Multiple OS command injection vulnerabilities exist in the swctrl functionality of Planet WGR-500 v1.3411b190912. A specially crafted network request can lead to arbitrary command execution. An attacker can send a network request to trigger these vulnerabilities.This command injection is related to the `new_device_name` request parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosi
uest parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2025-2227
CVE ID: CVE-2025-54405 State: PUBLISHED Published: 2025-10-07T13:55:04.725Z Last Updated: 2025-11-03T17:45:09.157Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Planet Products: WGR-500 Problem Types: CWE-78 Description: Multiple OS command injection vulnerabilities exist in the formPingCmd functionality of Planet WGR-500 v1.3411b190912. A specially crafted series of HTTP requests can lead to arbitrary command execution. An attacker can send a series of HTTP requests to trigger these vulnerabilities.This command injection is related to the `ipaddr` request parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - ht
`ipaddr` request parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2025-2229
CVE ID: CVE-2025-54406 State: PUBLISHED Published: 2025-10-07T13:55:04.884Z Last Updated: 2025-11-03T17:45:10.121Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Planet Products: WGR-500 Problem Types: CWE-78 Description: Multiple OS command injection vulnerabilities exist in the formPingCmd functionality of Planet WGR-500 v1.3411b190912. A specially crafted series of HTTP requests can lead to arbitrary command execution. An attacker can send a series of HTTP requests to trigger these vulnerabilities.This command injection is related to the `counts` request parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - ht
`counts` request parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2025-2229
CVE ID: CVE-2025-54409 State: PUBLISHED Published: 2025-08-14T15:52:24.069Z Last Updated: 2025-11-04T21:12:46.467Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: aide Products: aide Problem Types: CWE-476 Description: AIDE is an advanced intrusion detection environment. From versions 0.13 to 0.19.1, there is a null pointer dereference vulnerability in AIDE. An attacker can crash the program during report printing or database listing after setting extended file attributes with an empty attribute value or with a key containing a comma. A local user might exploit this to cause a local denial of service. This issue has been patched in version 0.19.2. A workarou
al user might exploit this to cause a local denial of service. This issue has been patched in version 0.19.2. A workaround involves removing xattrs group from rules matching files on affected file systems. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/aide/aide/security/advisories/GHSA-79g7-f8rv-jcxh - https://github.com/aide/aide/commit/54a6d0d9d5f14b81961d66373c0291bf4af4135a - https://github.com/aide/aide/releases/tag/v0.19.2
CVE ID: CVE-2025-54410 State: PUBLISHED Published: 2025-07-30T13:24:50.818Z Last Updated: 2025-07-30T13:38:40.357Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N) Vendors: moby Products: moby Problem Types: CWE-909 Description: Moby is an open source container framework developed by Docker Inc. that is distributed as Docker Engine, Mirantis Container Runtime, and various other downstream projects/products. A firewalld vulnerability affects Moby releases before 28.0.0. When firewalld reloads, Docker fails to re-create iptables rules that isolate bridge networks, allowing any container to access all ports on any other container across different bridge networks on the same