CVE-2025-27611
base-x homograph attack allows Unicode lookalike characters to bypass validation.
8.7 HighFix available
base-x is a base encoder and decoder of any given alphabet using bitcoin style leading zero compression. Versions 4.0.0, 5.0.0, and all prior to 3.0.11, are vulnerable to attackers potentially deceiving users into sending funds to an unintended address. This issue has been patched in versions 3.0.11, 4.0.1, and 5.0.1.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- High
- Availability
- None
Exploit likelihood
0.45%Up 0.4 points since May 1, 2025
What each source reports
CVE List Score used
base-x homograph attack allows Unicode lookalike characters to bypass validation.
base-x is a base encoder and decoder of any given alphabet using bitcoin style leading zero compression. Versions 4.0.0, 5.0.0, and all prior to 3.0.11, are vulnerable to attackers potentially deceiving users into sending funds to an unintended address. This issue has been patched in versions 3.0.11, 4.0.1, and 5.0.1.
- Record
CVE-2025-27611- CVSS 4.0
- 8.7 High
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N - Weakness
- CWE-1007
- Updated
- 2026-11-02
EUVDEUVD-2025-12752
base-x is a base encoder and decoder of any given alphabet using bitcoin style leading zero compression. Versions 4.0.0, 5.0.0, and all prior to 3.0.11, are vulnerable to attackers potentially deceiving users into sending funds to an unintended address. This issue has been patched in versions 3.0.11, 4.0.1, and 5.0.1.
- Record
EUVD-2025-12752- CVSS 4.0
- 8.7 High
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-xq7p-g2vc-g82p
Homograph attack allows Unicode lookalike characters to bypass validation.
Impact
Attackers can deceive users into sending funds to an unintended address.
Patches
- Record
GHSA-xq7p-g2vc-g82p- CVSS 4.0
- 8.7 High
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N - Weakness
- CWE-1007
- Updated
- 2026-11-02
NVD
base-x is a base encoder and decoder of any given alphabet using bitcoin style leading zero compression. Versions 4.0.0, 5.0.0, and all prior to 3.0.11, are vulnerable to attackers potentially deceiving users into sending funds to an unintended address. This issue has been patched in versions 3.0.11, 4.0.1, and 5.0.1.
- Record
CVE-2025-27611- CVSS 4.0
- 8.7 High
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - Weakness
- CWE-1007
- Updated
- 2026-11-02
OSV
base-x homograph attack allows Unicode lookalike characters to bypass validation.
base-x is a base encoder and decoder of any given alphabet using bitcoin style leading zero compression. Versions 4.0.0, 5.0.0, and all prior to 3.0.11, are vulnerable to attackers potentially deceiving users into sending funds to an unintended address. This issue has been patched in versions 3.0.11, 4.0.1, and 5.0.1.
- Record
CVE-2025-27611- CVSS 4.0
- 8.7 High
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N - Weakness
- CWE-1007
- Updated
- 2026-11-02
OSVGHSA-xq7p-g2vc-g82p
Homograph attack allows Unicode lookalike characters to bypass validation.
Impact
Attackers can deceive users into sending funds to an unintended address.
Patches
- Record
GHSA-xq7p-g2vc-g82p- CVSS 4.0
- 8.7 High
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N - Weakness
- CWE-1007
- Updated
- 2026-11-02
OSVRHSA-2025:10452
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.0.8 Security update
- Record
RHSA-2025:10452- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2025:10453
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.0.8 Security update
- Record
RHSA-2025:10453- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVCLSA-2026-1791197262No score
TuxCare security update for base-x (1 CVE)
TuxCare rebuilt base-x to address 1 CVE. Fixed in 2.0.6-tuxcare.1.
- Record
CLSA-2026-1791197262- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
base-xnpm | 5.0.0 to 5.0.0 | 5.0.1 |
base-xnpm | 4.0.0 to 4.0.0 | 4.0.1 |
base-xnpm | through 3.0.10 | 3.0.11 |
base-xTuxCare:npm | 2.0.6-tuxcare.0 up to 2.0.6-tuxcare.1, plus listed versions 2.0.6 | 2.0.6-tuxcare.1 |
base-xnpm | 5.0.0 up to 5.0.1 | 5.0.1 |
base-xnpm | 4.0.0 up to 4.0.1 | 4.0.1 |
base-xnpm | before 3.0.11 | 3.0.11 |
eap8-activemq-artemisRed Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 5 CVEs | before 0:2.33.0-3.redhat_00017.1.el8eap | 0:2.33.0-3.redhat_00017.1.el8eap |
eap8-activemq-artemis-cliRed Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 5 CVEs | before 0:2.33.0-3.redhat_00017.1.el8eap | 0:2.33.0-3.redhat_00017.1.el8eap |
eap8-activemq-artemis-commonsRed Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 5 CVEs | before 0:2.33.0-3.redhat_00017.1.el8eap | 0:2.33.0-3.redhat_00017.1.el8eap |
Show 109 moreShow less
| Package | Affected | Fixed |
|---|---|---|
eap8-activemq-artemis-core-clientRed Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 5 CVEs | before 0:2.33.0-3.redhat_00017.1.el8eap | 0:2.33.0-3.redhat_00017.1.el8eap |
eap8-activemq-artemis-dtoRed Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 5 CVEs | before 0:2.33.0-3.redhat_00017.1.el8eap | 0:2.33.0-3.redhat_00017.1.el8eap |
eap8-activemq-artemis-hornetq-protocolRed Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 5 CVEs | before 0:2.33.0-3.redhat_00017.1.el8eap | 0:2.33.0-3.redhat_00017.1.el8eap |
eap8-activemq-artemis-hqclient-protocolRed Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 5 CVEs | before 0:2.33.0-3.redhat_00017.1.el8eap | 0:2.33.0-3.redhat_00017.1.el8eap |
eap8-activemq-artemis-jakarta-clientRed Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 5 CVEs | before 0:2.33.0-3.redhat_00017.1.el8eap | 0:2.33.0-3.redhat_00017.1.el8eap |
eap8-activemq-artemis-jakarta-raRed Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 5 CVEs | before 0:2.33.0-3.redhat_00017.1.el8eap | 0:2.33.0-3.redhat_00017.1.el8eap |
eap8-activemq-artemis-jakarta-serverRed Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 5 CVEs | before 0:2.33.0-3.redhat_00017.1.el8eap | 0:2.33.0-3.redhat_00017.1.el8eap |
eap8-activemq-artemis-jakarta-service-extensionsRed Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 5 CVEs | before 0:2.33.0-3.redhat_00017.1.el8eap | 0:2.33.0-3.redhat_00017.1.el8eap |
eap8-activemq-artemis-jdbc-storeRed Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 5 CVEs | before 0:2.33.0-3.redhat_00017.1.el8eap | 0:2.33.0-3.redhat_00017.1.el8eap |
eap8-activemq-artemis-journalRed Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 5 CVEs | before 0:2.33.0-3.redhat_00017.1.el8eap | 0:2.33.0-3.redhat_00017.1.el8eap |
eap8-activemq-artemis-selectorRed Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 5 CVEs | before 0:2.33.0-3.redhat_00017.1.el8eap | 0:2.33.0-3.redhat_00017.1.el8eap |
eap8-activemq-artemis-serverRed Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 5 CVEs | before 0:2.33.0-3.redhat_00017.1.el8eap | 0:2.33.0-3.redhat_00017.1.el8eap |
eap8-apache-commons-beanutilsRed Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 5 CVEs | before 0:1.11.0-1.redhat_00001.1.el8eap | 0:1.11.0-1.redhat_00001.1.el8eap |
eap8-apache-cxfRed Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 5 CVEs | before 0:4.0.6-2.redhat_00001.1.el8eap | 0:4.0.6-2.redhat_00001.1.el8eap |
eap8-apache-cxf-rtRed Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 5 CVEs | before 0:4.0.6-2.redhat_00001.1.el8eap | 0:4.0.6-2.redhat_00001.1.el8eap |
eap8-apache-cxf-servicesRed Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 5 CVEs | before 0:4.0.6-2.redhat_00001.1.el8eap | 0:4.0.6-2.redhat_00001.1.el8eap |
eap8-apache-cxf-toolsRed Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 5 CVEs | before 0:4.0.6-2.redhat_00001.1.el8eap | 0:4.0.6-2.redhat_00001.1.el8eap |
eap8-apache-mime4jRed Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 5 CVEs | before 0:0.8.12-1.redhat_00001.1.el8eap | 0:0.8.12-1.redhat_00001.1.el8eap |
eap8-apache-mime4j-domRed Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 5 CVEs | before 0:0.8.12-1.redhat_00001.1.el8eap | 0:0.8.12-1.redhat_00001.1.el8eap |
eap8-apache-mime4j-storageRed Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 5 CVEs | before 0:0.8.12-1.redhat_00001.1.el8eap | 0:0.8.12-1.redhat_00001.1.el8eap |
eap8-eap-product-conf-parentRed Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 5 CVEs | before 0:800.8.0-1.GA_redhat_00001.1.el8eap | 0:800.8.0-1.GA_redhat_00001.1.el8eap |
eap8-eap-product-conf-wildfly-ee-feature-packRed Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 5 CVEs | before 0:800.8.0-1.GA_redhat_00001.1.el8eap | 0:800.8.0-1.GA_redhat_00001.1.el8eap |
eap8-elytron-webRed Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 5 CVEs | before 0:4.0.3-1.Final_redhat_00001.1.el8eap | 0:4.0.3-1.Final_redhat_00001.1.el8eap |
eap8-fastinfosetRed Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 5 CVEs | before 0:2.1.1-1.redhat_00001.1.el8eap | 0:2.1.1-1.redhat_00001.1.el8eap |
eap8-hal-consoleRed Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 5 CVEs | before 0:3.6.24-1.Final_redhat_00001.1.el8eap | 0:3.6.24-1.Final_redhat_00001.1.el8eap |
eap8-hibernateRed Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 5 CVEs | before 0:6.2.36-1.Final_redhat_00001.1.el8eap | 0:6.2.36-1.Final_redhat_00001.1.el8eap |
eap8-hibernate-coreRed Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 5 CVEs | before 0:6.2.36-1.Final_redhat_00001.1.el8eap | 0:6.2.36-1.Final_redhat_00001.1.el8eap |
eap8-hibernate-enversRed Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 5 CVEs | before 0:6.2.36-1.Final_redhat_00001.1.el8eap | 0:6.2.36-1.Final_redhat_00001.1.el8eap |
eap8-httpcomponents-asyncclientRed Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 5 CVEs | before 0:4.1.5-4.redhat_00006.1.el8eap | 0:4.1.5-4.redhat_00006.1.el8eap |
eap8-jboss-remotingRed Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 5 CVEs | before 0:5.0.31-1.Final_redhat_00001.1.el8eap | 0:5.0.31-1.Final_redhat_00001.1.el8eap |
eap8-jbossws-cxfRed Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 5 CVEs | before 0:7.3.3-1.Final_redhat_00001.1.el8eap | 0:7.3.3-1.Final_redhat_00001.1.el8eap |
eap8-narayanaRed Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 5 CVEs | before 0:6.0.6-1.Final_redhat_00001.1.el8eap | 0:6.0.6-1.Final_redhat_00001.1.el8eap |
eap8-narayana-jbosstxbridgeRed Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 5 CVEs | before 0:6.0.6-1.Final_redhat_00001.1.el8eap | 0:6.0.6-1.Final_redhat_00001.1.el8eap |
eap8-narayana-jbossxtsRed Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 5 CVEs | before 0:6.0.6-1.Final_redhat_00001.1.el8eap | 0:6.0.6-1.Final_redhat_00001.1.el8eap |
eap8-narayana-jts-idljRed Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 5 CVEs | before 0:6.0.6-1.Final_redhat_00001.1.el8eap | 0:6.0.6-1.Final_redhat_00001.1.el8eap |
eap8-narayana-jts-integrationRed Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 5 CVEs | before 0:6.0.6-1.Final_redhat_00001.1.el8eap | 0:6.0.6-1.Final_redhat_00001.1.el8eap |
eap8-narayana-restat-apiRed Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 5 CVEs | before 0:6.0.6-1.Final_redhat_00001.1.el8eap | 0:6.0.6-1.Final_redhat_00001.1.el8eap |
eap8-narayana-restat-bridgeRed Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 5 CVEs | before 0:6.0.6-1.Final_redhat_00001.1.el8eap | 0:6.0.6-1.Final_redhat_00001.1.el8eap |
eap8-narayana-restat-integrationRed Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 5 CVEs | before 0:6.0.6-1.Final_redhat_00001.1.el8eap | 0:6.0.6-1.Final_redhat_00001.1.el8eap |
eap8-narayana-restat-utilRed Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 5 CVEs | before 0:6.0.6-1.Final_redhat_00001.1.el8eap | 0:6.0.6-1.Final_redhat_00001.1.el8eap |
eap8-neethiRed Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 5 CVEs | before 0:3.2.1-1.redhat_00002.1.el8eap | 0:3.2.1-1.redhat_00002.1.el8eap |
eap8-reactivex-rxjava2Red Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 5 CVEs | before 0:2.2.21-3.redhat_00002.1.el8eap | 0:2.2.21-3.redhat_00002.1.el8eap |
eap8-slf4jRed Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 5 CVEs | before 0:2.0.17-1.redhat_00001.1.el8eap | 0:2.0.17-1.redhat_00001.1.el8eap |
eap8-slf4j-apiRed Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 5 CVEs | before 0:2.0.17-1.redhat_00001.1.el8eap | 0:2.0.17-1.redhat_00001.1.el8eap |
eap8-velocityRed Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 5 CVEs | before 0:2.3.0-4.redhat_00010.1.el8eap | 0:2.3.0-4.redhat_00010.1.el8eap |
eap8-velocity-engine-coreRed Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 5 CVEs | before 0:2.3.0-4.redhat_00010.1.el8eap | 0:2.3.0-4.redhat_00010.1.el8eap |
eap8-wildflyRed Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 5 CVEs | before 0:8.0.8-4.GA_redhat_00006.1.el8eap | 0:8.0.8-4.GA_redhat_00006.1.el8eap |
eap8-wildfly-elytronRed Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 5 CVEs | before 0:2.2.11-1.Final_redhat_00001.1.el8eap | 0:2.2.11-1.Final_redhat_00001.1.el8eap |
eap8-wildfly-elytron-toolRed Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 5 CVEs | before 0:2.2.11-1.Final_redhat_00001.1.el8eap | 0:2.2.11-1.Final_redhat_00001.1.el8eap |
eap8-wildfly-java-jdk11Red Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 5 CVEs | before 0:8.0.8-4.GA_redhat_00006.1.el8eap | 0:8.0.8-4.GA_redhat_00006.1.el8eap |
eap8-wildfly-java-jdk17Red Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 5 CVEs | before 0:8.0.8-4.GA_redhat_00006.1.el8eap | 0:8.0.8-4.GA_redhat_00006.1.el8eap |
eap8-wildfly-java-jdk21Red Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 5 CVEs | before 0:8.0.8-4.GA_redhat_00006.1.el8eap | 0:8.0.8-4.GA_redhat_00006.1.el8eap |
eap8-wildfly-modulesRed Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 5 CVEs | before 0:8.0.8-4.GA_redhat_00006.1.el8eap | 0:8.0.8-4.GA_redhat_00006.1.el8eap |
eap8-activemq-artemisRed Hat:jboss_enterprise_application_platform:8.0::el9 From an advisory covering 5 CVEs | before 0:2.33.0-3.redhat_00017.1.el9eap | 0:2.33.0-3.redhat_00017.1.el9eap |
eap8-activemq-artemis-cliRed Hat:jboss_enterprise_application_platform:8.0::el9 From an advisory covering 5 CVEs | before 0:2.33.0-3.redhat_00017.1.el9eap | 0:2.33.0-3.redhat_00017.1.el9eap |
eap8-activemq-artemis-commonsRed Hat:jboss_enterprise_application_platform:8.0::el9 From an advisory covering 5 CVEs | before 0:2.33.0-3.redhat_00017.1.el9eap | 0:2.33.0-3.redhat_00017.1.el9eap |
eap8-activemq-artemis-core-clientRed Hat:jboss_enterprise_application_platform:8.0::el9 From an advisory covering 5 CVEs | before 0:2.33.0-3.redhat_00017.1.el9eap | 0:2.33.0-3.redhat_00017.1.el9eap |
eap8-activemq-artemis-dtoRed Hat:jboss_enterprise_application_platform:8.0::el9 From an advisory covering 5 CVEs | before 0:2.33.0-3.redhat_00017.1.el9eap | 0:2.33.0-3.redhat_00017.1.el9eap |
eap8-activemq-artemis-hornetq-protocolRed Hat:jboss_enterprise_application_platform:8.0::el9 From an advisory covering 5 CVEs | before 0:2.33.0-3.redhat_00017.1.el9eap | 0:2.33.0-3.redhat_00017.1.el9eap |
eap8-activemq-artemis-hqclient-protocolRed Hat:jboss_enterprise_application_platform:8.0::el9 From an advisory covering 5 CVEs | before 0:2.33.0-3.redhat_00017.1.el9eap | 0:2.33.0-3.redhat_00017.1.el9eap |
eap8-activemq-artemis-jakarta-clientRed Hat:jboss_enterprise_application_platform:8.0::el9 From an advisory covering 5 CVEs | before 0:2.33.0-3.redhat_00017.1.el9eap | 0:2.33.0-3.redhat_00017.1.el9eap |
eap8-activemq-artemis-jakarta-raRed Hat:jboss_enterprise_application_platform:8.0::el9 From an advisory covering 5 CVEs | before 0:2.33.0-3.redhat_00017.1.el9eap | 0:2.33.0-3.redhat_00017.1.el9eap |
eap8-activemq-artemis-jakarta-serverRed Hat:jboss_enterprise_application_platform:8.0::el9 From an advisory covering 5 CVEs | before 0:2.33.0-3.redhat_00017.1.el9eap | 0:2.33.0-3.redhat_00017.1.el9eap |
eap8-activemq-artemis-jakarta-service-extensionsRed Hat:jboss_enterprise_application_platform:8.0::el9 From an advisory covering 5 CVEs | before 0:2.33.0-3.redhat_00017.1.el9eap | 0:2.33.0-3.redhat_00017.1.el9eap |
eap8-activemq-artemis-jdbc-storeRed Hat:jboss_enterprise_application_platform:8.0::el9 From an advisory covering 5 CVEs | before 0:2.33.0-3.redhat_00017.1.el9eap | 0:2.33.0-3.redhat_00017.1.el9eap |
eap8-activemq-artemis-journalRed Hat:jboss_enterprise_application_platform:8.0::el9 From an advisory covering 5 CVEs | before 0:2.33.0-3.redhat_00017.1.el9eap | 0:2.33.0-3.redhat_00017.1.el9eap |
eap8-activemq-artemis-selectorRed Hat:jboss_enterprise_application_platform:8.0::el9 From an advisory covering 5 CVEs | before 0:2.33.0-3.redhat_00017.1.el9eap | 0:2.33.0-3.redhat_00017.1.el9eap |
eap8-activemq-artemis-serverRed Hat:jboss_enterprise_application_platform:8.0::el9 From an advisory covering 5 CVEs | before 0:2.33.0-3.redhat_00017.1.el9eap | 0:2.33.0-3.redhat_00017.1.el9eap |
eap8-apache-commons-beanutilsRed Hat:jboss_enterprise_application_platform:8.0::el9 From an advisory covering 5 CVEs | before 0:1.11.0-1.redhat_00001.1.el9eap | 0:1.11.0-1.redhat_00001.1.el9eap |
eap8-apache-cxfRed Hat:jboss_enterprise_application_platform:8.0::el9 From an advisory covering 5 CVEs | before 0:4.0.6-2.redhat_00001.1.el9eap | 0:4.0.6-2.redhat_00001.1.el9eap |
eap8-apache-cxf-rtRed Hat:jboss_enterprise_application_platform:8.0::el9 From an advisory covering 5 CVEs | before 0:4.0.6-2.redhat_00001.1.el9eap | 0:4.0.6-2.redhat_00001.1.el9eap |
eap8-apache-cxf-servicesRed Hat:jboss_enterprise_application_platform:8.0::el9 From an advisory covering 5 CVEs | before 0:4.0.6-2.redhat_00001.1.el9eap | 0:4.0.6-2.redhat_00001.1.el9eap |
eap8-apache-cxf-toolsRed Hat:jboss_enterprise_application_platform:8.0::el9 From an advisory covering 5 CVEs | before 0:4.0.6-2.redhat_00001.1.el9eap | 0:4.0.6-2.redhat_00001.1.el9eap |
eap8-apache-mime4jRed Hat:jboss_enterprise_application_platform:8.0::el9 From an advisory covering 5 CVEs | before 0:0.8.12-1.redhat_00001.1.el9eap | 0:0.8.12-1.redhat_00001.1.el9eap |
eap8-apache-mime4j-domRed Hat:jboss_enterprise_application_platform:8.0::el9 From an advisory covering 5 CVEs | before 0:0.8.12-1.redhat_00001.1.el9eap | 0:0.8.12-1.redhat_00001.1.el9eap |
eap8-apache-mime4j-storageRed Hat:jboss_enterprise_application_platform:8.0::el9 From an advisory covering 5 CVEs | before 0:0.8.12-1.redhat_00001.1.el9eap | 0:0.8.12-1.redhat_00001.1.el9eap |
eap8-eap-product-conf-parentRed Hat:jboss_enterprise_application_platform:8.0::el9 From an advisory covering 5 CVEs | before 0:800.8.0-1.GA_redhat_00001.1.el9eap | 0:800.8.0-1.GA_redhat_00001.1.el9eap |
eap8-eap-product-conf-wildfly-ee-feature-packRed Hat:jboss_enterprise_application_platform:8.0::el9 From an advisory covering 5 CVEs | before 0:800.8.0-1.GA_redhat_00001.1.el9eap | 0:800.8.0-1.GA_redhat_00001.1.el9eap |
eap8-elytron-webRed Hat:jboss_enterprise_application_platform:8.0::el9 From an advisory covering 5 CVEs | before 0:4.0.3-1.Final_redhat_00001.1.el9eap | 0:4.0.3-1.Final_redhat_00001.1.el9eap |
eap8-fastinfosetRed Hat:jboss_enterprise_application_platform:8.0::el9 From an advisory covering 5 CVEs | before 0:2.1.1-1.redhat_00001.1.el9eap | 0:2.1.1-1.redhat_00001.1.el9eap |
eap8-hal-consoleRed Hat:jboss_enterprise_application_platform:8.0::el9 From an advisory covering 5 CVEs | before 0:3.6.24-1.Final_redhat_00001.1.el9eap | 0:3.6.24-1.Final_redhat_00001.1.el9eap |
eap8-hibernateRed Hat:jboss_enterprise_application_platform:8.0::el9 From an advisory covering 5 CVEs | before 0:6.2.36-1.Final_redhat_00001.1.el9eap | 0:6.2.36-1.Final_redhat_00001.1.el9eap |
eap8-hibernate-coreRed Hat:jboss_enterprise_application_platform:8.0::el9 From an advisory covering 5 CVEs | before 0:6.2.36-1.Final_redhat_00001.1.el9eap | 0:6.2.36-1.Final_redhat_00001.1.el9eap |
eap8-hibernate-enversRed Hat:jboss_enterprise_application_platform:8.0::el9 From an advisory covering 5 CVEs | before 0:6.2.36-1.Final_redhat_00001.1.el9eap | 0:6.2.36-1.Final_redhat_00001.1.el9eap |
eap8-httpcomponents-asyncclientRed Hat:jboss_enterprise_application_platform:8.0::el9 From an advisory covering 5 CVEs | before 0:4.1.5-4.redhat_00006.1.el9eap | 0:4.1.5-4.redhat_00006.1.el9eap |
eap8-jboss-remotingRed Hat:jboss_enterprise_application_platform:8.0::el9 From an advisory covering 5 CVEs | before 0:5.0.31-1.Final_redhat_00001.1.el9eap | 0:5.0.31-1.Final_redhat_00001.1.el9eap |
eap8-jbossws-cxfRed Hat:jboss_enterprise_application_platform:8.0::el9 From an advisory covering 5 CVEs | before 0:7.3.3-1.Final_redhat_00001.1.el9eap | 0:7.3.3-1.Final_redhat_00001.1.el9eap |
eap8-narayanaRed Hat:jboss_enterprise_application_platform:8.0::el9 From an advisory covering 5 CVEs | before 0:6.0.6-1.Final_redhat_00001.1.el9eap | 0:6.0.6-1.Final_redhat_00001.1.el9eap |
eap8-narayana-jbosstxbridgeRed Hat:jboss_enterprise_application_platform:8.0::el9 From an advisory covering 5 CVEs | before 0:6.0.6-1.Final_redhat_00001.1.el9eap | 0:6.0.6-1.Final_redhat_00001.1.el9eap |
eap8-narayana-jbossxtsRed Hat:jboss_enterprise_application_platform:8.0::el9 From an advisory covering 5 CVEs | before 0:6.0.6-1.Final_redhat_00001.1.el9eap | 0:6.0.6-1.Final_redhat_00001.1.el9eap |
eap8-narayana-jts-idljRed Hat:jboss_enterprise_application_platform:8.0::el9 From an advisory covering 5 CVEs | before 0:6.0.6-1.Final_redhat_00001.1.el9eap | 0:6.0.6-1.Final_redhat_00001.1.el9eap |
eap8-narayana-jts-integrationRed Hat:jboss_enterprise_application_platform:8.0::el9 From an advisory covering 5 CVEs | before 0:6.0.6-1.Final_redhat_00001.1.el9eap | 0:6.0.6-1.Final_redhat_00001.1.el9eap |
eap8-narayana-restat-apiRed Hat:jboss_enterprise_application_platform:8.0::el9 From an advisory covering 5 CVEs | before 0:6.0.6-1.Final_redhat_00001.1.el9eap | 0:6.0.6-1.Final_redhat_00001.1.el9eap |
eap8-narayana-restat-bridgeRed Hat:jboss_enterprise_application_platform:8.0::el9 From an advisory covering 5 CVEs | before 0:6.0.6-1.Final_redhat_00001.1.el9eap | 0:6.0.6-1.Final_redhat_00001.1.el9eap |
eap8-narayana-restat-integrationRed Hat:jboss_enterprise_application_platform:8.0::el9 From an advisory covering 5 CVEs | before 0:6.0.6-1.Final_redhat_00001.1.el9eap | 0:6.0.6-1.Final_redhat_00001.1.el9eap |
eap8-narayana-restat-utilRed Hat:jboss_enterprise_application_platform:8.0::el9 From an advisory covering 5 CVEs | before 0:6.0.6-1.Final_redhat_00001.1.el9eap | 0:6.0.6-1.Final_redhat_00001.1.el9eap |
eap8-neethiRed Hat:jboss_enterprise_application_platform:8.0::el9 From an advisory covering 5 CVEs | before 0:3.2.1-1.redhat_00002.1.el9eap | 0:3.2.1-1.redhat_00002.1.el9eap |
eap8-reactivex-rxjava2Red Hat:jboss_enterprise_application_platform:8.0::el9 From an advisory covering 5 CVEs | before 0:2.2.21-3.redhat_00002.1.el9eap | 0:2.2.21-3.redhat_00002.1.el9eap |
eap8-slf4jRed Hat:jboss_enterprise_application_platform:8.0::el9 From an advisory covering 5 CVEs | before 0:2.0.17-1.redhat_00001.1.el9eap | 0:2.0.17-1.redhat_00001.1.el9eap |
eap8-slf4j-apiRed Hat:jboss_enterprise_application_platform:8.0::el9 From an advisory covering 5 CVEs | before 0:2.0.17-1.redhat_00001.1.el9eap | 0:2.0.17-1.redhat_00001.1.el9eap |
eap8-velocityRed Hat:jboss_enterprise_application_platform:8.0::el9 From an advisory covering 5 CVEs | before 0:2.3.0-4.redhat_00010.1.el9eap | 0:2.3.0-4.redhat_00010.1.el9eap |
eap8-velocity-engine-coreRed Hat:jboss_enterprise_application_platform:8.0::el9 From an advisory covering 5 CVEs | before 0:2.3.0-4.redhat_00010.1.el9eap | 0:2.3.0-4.redhat_00010.1.el9eap |
eap8-wildflyRed Hat:jboss_enterprise_application_platform:8.0::el9 From an advisory covering 5 CVEs | before 0:8.0.8-4.GA_redhat_00006.1.el9eap | 0:8.0.8-4.GA_redhat_00006.1.el9eap |
eap8-wildfly-elytronRed Hat:jboss_enterprise_application_platform:8.0::el9 From an advisory covering 5 CVEs | before 0:2.2.11-1.Final_redhat_00001.1.el9eap | 0:2.2.11-1.Final_redhat_00001.1.el9eap |
eap8-wildfly-elytron-toolRed Hat:jboss_enterprise_application_platform:8.0::el9 From an advisory covering 5 CVEs | before 0:2.2.11-1.Final_redhat_00001.1.el9eap | 0:2.2.11-1.Final_redhat_00001.1.el9eap |
eap8-wildfly-java-jdk11Red Hat:jboss_enterprise_application_platform:8.0::el9 From an advisory covering 5 CVEs | before 0:8.0.8-4.GA_redhat_00006.1.el9eap | 0:8.0.8-4.GA_redhat_00006.1.el9eap |
eap8-wildfly-java-jdk17Red Hat:jboss_enterprise_application_platform:8.0::el9 From an advisory covering 5 CVEs | before 0:8.0.8-4.GA_redhat_00006.1.el9eap | 0:8.0.8-4.GA_redhat_00006.1.el9eap |
eap8-wildfly-java-jdk21Red Hat:jboss_enterprise_application_platform:8.0::el9 From an advisory covering 5 CVEs | before 0:8.0.8-4.GA_redhat_00006.1.el9eap | 0:8.0.8-4.GA_redhat_00006.1.el9eap |
eap8-wildfly-modulesRed Hat:jboss_enterprise_application_platform:8.0::el9 From an advisory covering 5 CVEs | before 0:8.0.8-4.GA_redhat_00006.1.el9eap | 0:8.0.8-4.GA_redhat_00006.1.el9eap |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2025-27611 is a high vulnerability (CVSS 8.7) in Cryptocoinjs Base-x, published April 30, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.45%, the 39th percentile. Fixed in base-x 5.0.1.
References
github.com/cryptocoinjs/base-x/security/advisories/GHSA-xq7p-g2vc-g82p
nvd.nist.gov/vuln/detail/CVE-2025-27611
Show 52 moreShow less
access.redhat.com/errata/RHSA-2025:10452
docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/8.0
bugzilla.redhat.com/show_bug.cgi?id=2339095
issues.redhat.com/browse/JBEAP-28866
security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10452.json
cve.org/CVERecord?id=CVE-2025-2251
lists.apache.org/thread/lfs8l63rnctnj2skfrxyys7v8fgnt122
openwall.com/lists/oss-security/2025/05/28/6