CVE-2025-27611
base-x homograph attack allows Unicode lookalike characters to bypass validation.
base-x is a base encoder and decoder of any given alphabet using bitcoin style leading zero compression. Versions 4.0.0, 5.0.0, and all prior to 3.0.11, are vulnerable to attackers potentially deceiving users into sending funds to an unintended address. This issue has been patched in versions 3.0.11, 4.0.1, and 5.0.1.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- High
- Availability
- None
Exploit likelihood
What each source reports
CVE List Score used
8.7
base-x homograph attack allows Unicode lookalike characters to bypass validation.
base-x is a base encoder and decoder of any given alphabet using bitcoin style leading zero compression. Versions 4.0.0, 5.0.0, and all prior to 3.0.11, are vulnerable to attackers potentially deceiving users into sending funds to an unintended address. This issue has been patched in versions 3.0.11, 4.0.1, and 5.0.1.
- Record
CVE-2025-27611- CVSS 4.0
- 8.7 High
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N - Weakness
- CWE-1007
- Updated
- 2026-11-02
EUVDEUVD-2025-12752
8.7
base-x is a base encoder and decoder of any given alphabet using bitcoin style leading zero compression. Versions 4.0.0, 5.0.0, and all prior to 3.0.11, are vulnerable to attackers potentially deceiving users into sending funds to an unintended address. This issue has been patched in versions 3.0.11, 4.0.1, and 5.0.1.
- Record
EUVD-2025-12752- CVSS 4.0
- 8.7 High
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-xq7p-g2vc-g82p
8.7
Homograph attack allows Unicode lookalike characters to bypass validation.
Impact
Attackers can deceive users into sending funds to an unintended address.
Patches
- Record
GHSA-xq7p-g2vc-g82p- CVSS 4.0
- 8.7 High
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N - Weakness
- CWE-1007
- Updated
- 2026-11-02
NVD
8.7
base-x is a base encoder and decoder of any given alphabet using bitcoin style leading zero compression. Versions 4.0.0, 5.0.0, and all prior to 3.0.11, are vulnerable to attackers potentially deceiving users into sending funds to an unintended address. This issue has been patched in versions 3.0.11, 4.0.1, and 5.0.1.
- Record
CVE-2025-27611- CVSS 4.0
- 8.7 High
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - Weakness
- CWE-1007
- Updated
- 2026-11-02
OSV
8.7
base-x homograph attack allows Unicode lookalike characters to bypass validation.
base-x is a base encoder and decoder of any given alphabet using bitcoin style leading zero compression. Versions 4.0.0, 5.0.0, and all prior to 3.0.11, are vulnerable to attackers potentially deceiving users into sending funds to an unintended address. This issue has been patched in versions 3.0.11, 4.0.1, and 5.0.1.
- Record
CVE-2025-27611- CVSS 4.0
- 8.7 High
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N - Weakness
- CWE-1007
- Updated
- 2026-11-02
OSVGHSA-xq7p-g2vc-g82p
8.7
Homograph attack allows Unicode lookalike characters to bypass validation.
Impact
Attackers can deceive users into sending funds to an unintended address.
Patches
- Record
GHSA-xq7p-g2vc-g82p- CVSS 4.0
- 8.7 High
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N - Weakness
- CWE-1007
- Updated
- 2026-11-02
OSVRHSA-2025:10452
8.8
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.0.8 Security update
- Record
RHSA-2025:10452- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2025:10453
8.8
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.0.8 Security update
- Record
RHSA-2025:10453- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVCLSA-2026-1791197262 No score
TuxCare security update for base-x (1 CVE)
TuxCare rebuilt base-x to address 1 CVE. Fixed in 2.0.6-tuxcare.1.
- Record
CLSA-2026-1791197262- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
base-xnpm |
5.0.0 to 5.0.0 | 5.0.1 |
base-xnpm |
4.0.0 to 4.0.0 | 4.0.1 |
base-xnpm |
through 3.0.10 | 3.0.11 |
base-xTuxCare:npm |
2.0.6-tuxcare.0 up to 2.0.6-tuxcare.1, plus listed versions 2.0.6 |
2.0.6-tuxcare.1 |
base-xnpm |
5.0.0 up to 5.0.1 | 5.0.1 |
base-xnpm |
4.0.0 up to 4.0.1 | 4.0.1 |
base-xnpm |
before 3.0.11 | 3.0.11 |
eap8-activemq-artemisRed Hat:jboss_enterprise_application_platform:8.0::el8 |
before 0:2.33.0-3.redhat_00017.1.el8eap | 0:2.33.0-3.redhat_00017.1.el8eap |
eap8-activemq-artemis-cliRed Hat:jboss_enterprise_application_platform:8.0::el8 |
before 0:2.33.0-3.redhat_00017.1.el8eap | 0:2.33.0-3.redhat_00017.1.el8eap |
eap8-activemq-artemis-commonsRed Hat:jboss_enterprise_application_platform:8.0::el8 |
before 0:2.33.0-3.redhat_00017.1.el8eap | 0:2.33.0-3.redhat_00017.1.el8eap |
Show 109 moreShow less
| Package | Affected | Fixed |
|---|---|---|
eap8-activemq-artemis-core-clientRed Hat:jboss_enterprise_application_platform:8.0::el8 |
before 0:2.33.0-3.redhat_00017.1.el8eap | 0:2.33.0-3.redhat_00017.1.el8eap |
eap8-activemq-artemis-dtoRed Hat:jboss_enterprise_application_platform:8.0::el8 |
before 0:2.33.0-3.redhat_00017.1.el8eap | 0:2.33.0-3.redhat_00017.1.el8eap |
eap8-activemq-artemis-hornetq-protocolRed Hat:jboss_enterprise_application_platform:8.0::el8 |
before 0:2.33.0-3.redhat_00017.1.el8eap | 0:2.33.0-3.redhat_00017.1.el8eap |
eap8-activemq-artemis-hqclient-protocolRed Hat:jboss_enterprise_application_platform:8.0::el8 |
before 0:2.33.0-3.redhat_00017.1.el8eap | 0:2.33.0-3.redhat_00017.1.el8eap |
eap8-activemq-artemis-jakarta-clientRed Hat:jboss_enterprise_application_platform:8.0::el8 |
before 0:2.33.0-3.redhat_00017.1.el8eap | 0:2.33.0-3.redhat_00017.1.el8eap |
eap8-activemq-artemis-jakarta-raRed Hat:jboss_enterprise_application_platform:8.0::el8 |
before 0:2.33.0-3.redhat_00017.1.el8eap | 0:2.33.0-3.redhat_00017.1.el8eap |
eap8-activemq-artemis-jakarta-serverRed Hat:jboss_enterprise_application_platform:8.0::el8 |
before 0:2.33.0-3.redhat_00017.1.el8eap | 0:2.33.0-3.redhat_00017.1.el8eap |
eap8-activemq-artemis-jakarta-service-extensionsRed Hat:jboss_enterprise_application_platform:8.0::el8 |
before 0:2.33.0-3.redhat_00017.1.el8eap | 0:2.33.0-3.redhat_00017.1.el8eap |
eap8-activemq-artemis-jdbc-storeRed Hat:jboss_enterprise_application_platform:8.0::el8 |
before 0:2.33.0-3.redhat_00017.1.el8eap | 0:2.33.0-3.redhat_00017.1.el8eap |
eap8-activemq-artemis-journalRed Hat:jboss_enterprise_application_platform:8.0::el8 |
before 0:2.33.0-3.redhat_00017.1.el8eap | 0:2.33.0-3.redhat_00017.1.el8eap |
eap8-activemq-artemis-selectorRed Hat:jboss_enterprise_application_platform:8.0::el8 |
before 0:2.33.0-3.redhat_00017.1.el8eap | 0:2.33.0-3.redhat_00017.1.el8eap |
eap8-activemq-artemis-serverRed Hat:jboss_enterprise_application_platform:8.0::el8 |
before 0:2.33.0-3.redhat_00017.1.el8eap | 0:2.33.0-3.redhat_00017.1.el8eap |
eap8-apache-commons-beanutilsRed Hat:jboss_enterprise_application_platform:8.0::el8 |
before 0:1.11.0-1.redhat_00001.1.el8eap | 0:1.11.0-1.redhat_00001.1.el8eap |
eap8-apache-cxfRed Hat:jboss_enterprise_application_platform:8.0::el8 |
before 0:4.0.6-2.redhat_00001.1.el8eap | 0:4.0.6-2.redhat_00001.1.el8eap |
eap8-apache-cxf-rtRed Hat:jboss_enterprise_application_platform:8.0::el8 |
before 0:4.0.6-2.redhat_00001.1.el8eap | 0:4.0.6-2.redhat_00001.1.el8eap |
eap8-apache-cxf-servicesRed Hat:jboss_enterprise_application_platform:8.0::el8 |
before 0:4.0.6-2.redhat_00001.1.el8eap | 0:4.0.6-2.redhat_00001.1.el8eap |
eap8-apache-cxf-toolsRed Hat:jboss_enterprise_application_platform:8.0::el8 |
before 0:4.0.6-2.redhat_00001.1.el8eap | 0:4.0.6-2.redhat_00001.1.el8eap |
eap8-apache-mime4jRed Hat:jboss_enterprise_application_platform:8.0::el8 |
before 0:0.8.12-1.redhat_00001.1.el8eap | 0:0.8.12-1.redhat_00001.1.el8eap |
eap8-apache-mime4j-domRed Hat:jboss_enterprise_application_platform:8.0::el8 |
before 0:0.8.12-1.redhat_00001.1.el8eap | 0:0.8.12-1.redhat_00001.1.el8eap |
eap8-apache-mime4j-storageRed Hat:jboss_enterprise_application_platform:8.0::el8 |
before 0:0.8.12-1.redhat_00001.1.el8eap | 0:0.8.12-1.redhat_00001.1.el8eap |
eap8-eap-product-conf-parentRed Hat:jboss_enterprise_application_platform:8.0::el8 |
before 0:800.8.0-1.GA_redhat_00001.1.el8eap | 0:800.8.0-1.GA_redhat_00001.1.el8eap |
eap8-eap-product-conf-wildfly-ee-feature-packRed Hat:jboss_enterprise_application_platform:8.0::el8 |
before 0:800.8.0-1.GA_redhat_00001.1.el8eap | 0:800.8.0-1.GA_redhat_00001.1.el8eap |
eap8-elytron-webRed Hat:jboss_enterprise_application_platform:8.0::el8 |
before 0:4.0.3-1.Final_redhat_00001.1.el8eap | 0:4.0.3-1.Final_redhat_00001.1.el8eap |
eap8-fastinfosetRed Hat:jboss_enterprise_application_platform:8.0::el8 |
before 0:2.1.1-1.redhat_00001.1.el8eap | 0:2.1.1-1.redhat_00001.1.el8eap |
eap8-hal-consoleRed Hat:jboss_enterprise_application_platform:8.0::el8 |
before 0:3.6.24-1.Final_redhat_00001.1.el8eap | 0:3.6.24-1.Final_redhat_00001.1.el8eap |
eap8-hibernateRed Hat:jboss_enterprise_application_platform:8.0::el8 |
before 0:6.2.36-1.Final_redhat_00001.1.el8eap | 0:6.2.36-1.Final_redhat_00001.1.el8eap |
eap8-hibernate-coreRed Hat:jboss_enterprise_application_platform:8.0::el8 |
before 0:6.2.36-1.Final_redhat_00001.1.el8eap | 0:6.2.36-1.Final_redhat_00001.1.el8eap |
eap8-hibernate-enversRed Hat:jboss_enterprise_application_platform:8.0::el8 |
before 0:6.2.36-1.Final_redhat_00001.1.el8eap | 0:6.2.36-1.Final_redhat_00001.1.el8eap |
eap8-httpcomponents-asyncclientRed Hat:jboss_enterprise_application_platform:8.0::el8 |
before 0:4.1.5-4.redhat_00006.1.el8eap | 0:4.1.5-4.redhat_00006.1.el8eap |
eap8-jboss-remotingRed Hat:jboss_enterprise_application_platform:8.0::el8 |
before 0:5.0.31-1.Final_redhat_00001.1.el8eap | 0:5.0.31-1.Final_redhat_00001.1.el8eap |
eap8-jbossws-cxfRed Hat:jboss_enterprise_application_platform:8.0::el8 |
before 0:7.3.3-1.Final_redhat_00001.1.el8eap | 0:7.3.3-1.Final_redhat_00001.1.el8eap |
eap8-narayanaRed Hat:jboss_enterprise_application_platform:8.0::el8 |
before 0:6.0.6-1.Final_redhat_00001.1.el8eap | 0:6.0.6-1.Final_redhat_00001.1.el8eap |
eap8-narayana-jbosstxbridgeRed Hat:jboss_enterprise_application_platform:8.0::el8 |
before 0:6.0.6-1.Final_redhat_00001.1.el8eap | 0:6.0.6-1.Final_redhat_00001.1.el8eap |
eap8-narayana-jbossxtsRed Hat:jboss_enterprise_application_platform:8.0::el8 |
before 0:6.0.6-1.Final_redhat_00001.1.el8eap | 0:6.0.6-1.Final_redhat_00001.1.el8eap |
eap8-narayana-jts-idljRed Hat:jboss_enterprise_application_platform:8.0::el8 |
before 0:6.0.6-1.Final_redhat_00001.1.el8eap | 0:6.0.6-1.Final_redhat_00001.1.el8eap |
eap8-narayana-jts-integrationRed Hat:jboss_enterprise_application_platform:8.0::el8 |
before 0:6.0.6-1.Final_redhat_00001.1.el8eap | 0:6.0.6-1.Final_redhat_00001.1.el8eap |
eap8-narayana-restat-apiRed Hat:jboss_enterprise_application_platform:8.0::el8 |
before 0:6.0.6-1.Final_redhat_00001.1.el8eap | 0:6.0.6-1.Final_redhat_00001.1.el8eap |
eap8-narayana-restat-bridgeRed Hat:jboss_enterprise_application_platform:8.0::el8 |
before 0:6.0.6-1.Final_redhat_00001.1.el8eap | 0:6.0.6-1.Final_redhat_00001.1.el8eap |
eap8-narayana-restat-integrationRed Hat:jboss_enterprise_application_platform:8.0::el8 |
before 0:6.0.6-1.Final_redhat_00001.1.el8eap | 0:6.0.6-1.Final_redhat_00001.1.el8eap |
eap8-narayana-restat-utilRed Hat:jboss_enterprise_application_platform:8.0::el8 |
before 0:6.0.6-1.Final_redhat_00001.1.el8eap | 0:6.0.6-1.Final_redhat_00001.1.el8eap |
eap8-neethiRed Hat:jboss_enterprise_application_platform:8.0::el8 |
before 0:3.2.1-1.redhat_00002.1.el8eap | 0:3.2.1-1.redhat_00002.1.el8eap |
eap8-reactivex-rxjava2Red Hat:jboss_enterprise_application_platform:8.0::el8 |
before 0:2.2.21-3.redhat_00002.1.el8eap | 0:2.2.21-3.redhat_00002.1.el8eap |
eap8-slf4jRed Hat:jboss_enterprise_application_platform:8.0::el8 |
before 0:2.0.17-1.redhat_00001.1.el8eap | 0:2.0.17-1.redhat_00001.1.el8eap |
eap8-slf4j-apiRed Hat:jboss_enterprise_application_platform:8.0::el8 |
before 0:2.0.17-1.redhat_00001.1.el8eap | 0:2.0.17-1.redhat_00001.1.el8eap |
eap8-velocityRed Hat:jboss_enterprise_application_platform:8.0::el8 |
before 0:2.3.0-4.redhat_00010.1.el8eap | 0:2.3.0-4.redhat_00010.1.el8eap |
eap8-velocity-engine-coreRed Hat:jboss_enterprise_application_platform:8.0::el8 |
before 0:2.3.0-4.redhat_00010.1.el8eap | 0:2.3.0-4.redhat_00010.1.el8eap |
eap8-wildflyRed Hat:jboss_enterprise_application_platform:8.0::el8 |
before 0:8.0.8-4.GA_redhat_00006.1.el8eap | 0:8.0.8-4.GA_redhat_00006.1.el8eap |
eap8-wildfly-elytronRed Hat:jboss_enterprise_application_platform:8.0::el8 |
before 0:2.2.11-1.Final_redhat_00001.1.el8eap | 0:2.2.11-1.Final_redhat_00001.1.el8eap |
eap8-wildfly-elytron-toolRed Hat:jboss_enterprise_application_platform:8.0::el8 |
before 0:2.2.11-1.Final_redhat_00001.1.el8eap | 0:2.2.11-1.Final_redhat_00001.1.el8eap |
eap8-wildfly-java-jdk11Red Hat:jboss_enterprise_application_platform:8.0::el8 |
before 0:8.0.8-4.GA_redhat_00006.1.el8eap | 0:8.0.8-4.GA_redhat_00006.1.el8eap |
eap8-wildfly-java-jdk17Red Hat:jboss_enterprise_application_platform:8.0::el8 |
before 0:8.0.8-4.GA_redhat_00006.1.el8eap | 0:8.0.8-4.GA_redhat_00006.1.el8eap |
eap8-wildfly-java-jdk21Red Hat:jboss_enterprise_application_platform:8.0::el8 |
before 0:8.0.8-4.GA_redhat_00006.1.el8eap | 0:8.0.8-4.GA_redhat_00006.1.el8eap |
eap8-wildfly-modulesRed Hat:jboss_enterprise_application_platform:8.0::el8 |
before 0:8.0.8-4.GA_redhat_00006.1.el8eap | 0:8.0.8-4.GA_redhat_00006.1.el8eap |
eap8-activemq-artemisRed Hat:jboss_enterprise_application_platform:8.0::el9 |
before 0:2.33.0-3.redhat_00017.1.el9eap | 0:2.33.0-3.redhat_00017.1.el9eap |
eap8-activemq-artemis-cliRed Hat:jboss_enterprise_application_platform:8.0::el9 |
before 0:2.33.0-3.redhat_00017.1.el9eap | 0:2.33.0-3.redhat_00017.1.el9eap |
eap8-activemq-artemis-commonsRed Hat:jboss_enterprise_application_platform:8.0::el9 |
before 0:2.33.0-3.redhat_00017.1.el9eap | 0:2.33.0-3.redhat_00017.1.el9eap |
eap8-activemq-artemis-core-clientRed Hat:jboss_enterprise_application_platform:8.0::el9 |
before 0:2.33.0-3.redhat_00017.1.el9eap | 0:2.33.0-3.redhat_00017.1.el9eap |
eap8-activemq-artemis-dtoRed Hat:jboss_enterprise_application_platform:8.0::el9 |
before 0:2.33.0-3.redhat_00017.1.el9eap | 0:2.33.0-3.redhat_00017.1.el9eap |
eap8-activemq-artemis-hornetq-protocolRed Hat:jboss_enterprise_application_platform:8.0::el9 |
before 0:2.33.0-3.redhat_00017.1.el9eap | 0:2.33.0-3.redhat_00017.1.el9eap |
eap8-activemq-artemis-hqclient-protocolRed Hat:jboss_enterprise_application_platform:8.0::el9 |
before 0:2.33.0-3.redhat_00017.1.el9eap | 0:2.33.0-3.redhat_00017.1.el9eap |
eap8-activemq-artemis-jakarta-clientRed Hat:jboss_enterprise_application_platform:8.0::el9 |
before 0:2.33.0-3.redhat_00017.1.el9eap | 0:2.33.0-3.redhat_00017.1.el9eap |
eap8-activemq-artemis-jakarta-raRed Hat:jboss_enterprise_application_platform:8.0::el9 |
before 0:2.33.0-3.redhat_00017.1.el9eap | 0:2.33.0-3.redhat_00017.1.el9eap |
eap8-activemq-artemis-jakarta-serverRed Hat:jboss_enterprise_application_platform:8.0::el9 |
before 0:2.33.0-3.redhat_00017.1.el9eap | 0:2.33.0-3.redhat_00017.1.el9eap |
eap8-activemq-artemis-jakarta-service-extensionsRed Hat:jboss_enterprise_application_platform:8.0::el9 |
before 0:2.33.0-3.redhat_00017.1.el9eap | 0:2.33.0-3.redhat_00017.1.el9eap |
eap8-activemq-artemis-jdbc-storeRed Hat:jboss_enterprise_application_platform:8.0::el9 |
before 0:2.33.0-3.redhat_00017.1.el9eap | 0:2.33.0-3.redhat_00017.1.el9eap |
eap8-activemq-artemis-journalRed Hat:jboss_enterprise_application_platform:8.0::el9 |
before 0:2.33.0-3.redhat_00017.1.el9eap | 0:2.33.0-3.redhat_00017.1.el9eap |
eap8-activemq-artemis-selectorRed Hat:jboss_enterprise_application_platform:8.0::el9 |
before 0:2.33.0-3.redhat_00017.1.el9eap | 0:2.33.0-3.redhat_00017.1.el9eap |
eap8-activemq-artemis-serverRed Hat:jboss_enterprise_application_platform:8.0::el9 |
before 0:2.33.0-3.redhat_00017.1.el9eap | 0:2.33.0-3.redhat_00017.1.el9eap |
eap8-apache-commons-beanutilsRed Hat:jboss_enterprise_application_platform:8.0::el9 |
before 0:1.11.0-1.redhat_00001.1.el9eap | 0:1.11.0-1.redhat_00001.1.el9eap |
eap8-apache-cxfRed Hat:jboss_enterprise_application_platform:8.0::el9 |
before 0:4.0.6-2.redhat_00001.1.el9eap | 0:4.0.6-2.redhat_00001.1.el9eap |
eap8-apache-cxf-rtRed Hat:jboss_enterprise_application_platform:8.0::el9 |
before 0:4.0.6-2.redhat_00001.1.el9eap | 0:4.0.6-2.redhat_00001.1.el9eap |
eap8-apache-cxf-servicesRed Hat:jboss_enterprise_application_platform:8.0::el9 |
before 0:4.0.6-2.redhat_00001.1.el9eap | 0:4.0.6-2.redhat_00001.1.el9eap |
eap8-apache-cxf-toolsRed Hat:jboss_enterprise_application_platform:8.0::el9 |
before 0:4.0.6-2.redhat_00001.1.el9eap | 0:4.0.6-2.redhat_00001.1.el9eap |
eap8-apache-mime4jRed Hat:jboss_enterprise_application_platform:8.0::el9 |
before 0:0.8.12-1.redhat_00001.1.el9eap | 0:0.8.12-1.redhat_00001.1.el9eap |
eap8-apache-mime4j-domRed Hat:jboss_enterprise_application_platform:8.0::el9 |
before 0:0.8.12-1.redhat_00001.1.el9eap | 0:0.8.12-1.redhat_00001.1.el9eap |
eap8-apache-mime4j-storageRed Hat:jboss_enterprise_application_platform:8.0::el9 |
before 0:0.8.12-1.redhat_00001.1.el9eap | 0:0.8.12-1.redhat_00001.1.el9eap |
eap8-eap-product-conf-parentRed Hat:jboss_enterprise_application_platform:8.0::el9 |
before 0:800.8.0-1.GA_redhat_00001.1.el9eap | 0:800.8.0-1.GA_redhat_00001.1.el9eap |
eap8-eap-product-conf-wildfly-ee-feature-packRed Hat:jboss_enterprise_application_platform:8.0::el9 |
before 0:800.8.0-1.GA_redhat_00001.1.el9eap | 0:800.8.0-1.GA_redhat_00001.1.el9eap |
eap8-elytron-webRed Hat:jboss_enterprise_application_platform:8.0::el9 |
before 0:4.0.3-1.Final_redhat_00001.1.el9eap | 0:4.0.3-1.Final_redhat_00001.1.el9eap |
eap8-fastinfosetRed Hat:jboss_enterprise_application_platform:8.0::el9 |
before 0:2.1.1-1.redhat_00001.1.el9eap | 0:2.1.1-1.redhat_00001.1.el9eap |
eap8-hal-consoleRed Hat:jboss_enterprise_application_platform:8.0::el9 |
before 0:3.6.24-1.Final_redhat_00001.1.el9eap | 0:3.6.24-1.Final_redhat_00001.1.el9eap |
eap8-hibernateRed Hat:jboss_enterprise_application_platform:8.0::el9 |
before 0:6.2.36-1.Final_redhat_00001.1.el9eap | 0:6.2.36-1.Final_redhat_00001.1.el9eap |
eap8-hibernate-coreRed Hat:jboss_enterprise_application_platform:8.0::el9 |
before 0:6.2.36-1.Final_redhat_00001.1.el9eap | 0:6.2.36-1.Final_redhat_00001.1.el9eap |
eap8-hibernate-enversRed Hat:jboss_enterprise_application_platform:8.0::el9 |
before 0:6.2.36-1.Final_redhat_00001.1.el9eap | 0:6.2.36-1.Final_redhat_00001.1.el9eap |
eap8-httpcomponents-asyncclientRed Hat:jboss_enterprise_application_platform:8.0::el9 |
before 0:4.1.5-4.redhat_00006.1.el9eap | 0:4.1.5-4.redhat_00006.1.el9eap |
eap8-jboss-remotingRed Hat:jboss_enterprise_application_platform:8.0::el9 |
before 0:5.0.31-1.Final_redhat_00001.1.el9eap | 0:5.0.31-1.Final_redhat_00001.1.el9eap |
eap8-jbossws-cxfRed Hat:jboss_enterprise_application_platform:8.0::el9 |
before 0:7.3.3-1.Final_redhat_00001.1.el9eap | 0:7.3.3-1.Final_redhat_00001.1.el9eap |
eap8-narayanaRed Hat:jboss_enterprise_application_platform:8.0::el9 |
before 0:6.0.6-1.Final_redhat_00001.1.el9eap | 0:6.0.6-1.Final_redhat_00001.1.el9eap |
eap8-narayana-jbosstxbridgeRed Hat:jboss_enterprise_application_platform:8.0::el9 |
before 0:6.0.6-1.Final_redhat_00001.1.el9eap | 0:6.0.6-1.Final_redhat_00001.1.el9eap |
eap8-narayana-jbossxtsRed Hat:jboss_enterprise_application_platform:8.0::el9 |
before 0:6.0.6-1.Final_redhat_00001.1.el9eap | 0:6.0.6-1.Final_redhat_00001.1.el9eap |
eap8-narayana-jts-idljRed Hat:jboss_enterprise_application_platform:8.0::el9 |
before 0:6.0.6-1.Final_redhat_00001.1.el9eap | 0:6.0.6-1.Final_redhat_00001.1.el9eap |
eap8-narayana-jts-integrationRed Hat:jboss_enterprise_application_platform:8.0::el9 |
before 0:6.0.6-1.Final_redhat_00001.1.el9eap | 0:6.0.6-1.Final_redhat_00001.1.el9eap |
eap8-narayana-restat-apiRed Hat:jboss_enterprise_application_platform:8.0::el9 |
before 0:6.0.6-1.Final_redhat_00001.1.el9eap | 0:6.0.6-1.Final_redhat_00001.1.el9eap |
eap8-narayana-restat-bridgeRed Hat:jboss_enterprise_application_platform:8.0::el9 |
before 0:6.0.6-1.Final_redhat_00001.1.el9eap | 0:6.0.6-1.Final_redhat_00001.1.el9eap |
eap8-narayana-restat-integrationRed Hat:jboss_enterprise_application_platform:8.0::el9 |
before 0:6.0.6-1.Final_redhat_00001.1.el9eap | 0:6.0.6-1.Final_redhat_00001.1.el9eap |
eap8-narayana-restat-utilRed Hat:jboss_enterprise_application_platform:8.0::el9 |
before 0:6.0.6-1.Final_redhat_00001.1.el9eap | 0:6.0.6-1.Final_redhat_00001.1.el9eap |
eap8-neethiRed Hat:jboss_enterprise_application_platform:8.0::el9 |
before 0:3.2.1-1.redhat_00002.1.el9eap | 0:3.2.1-1.redhat_00002.1.el9eap |
eap8-reactivex-rxjava2Red Hat:jboss_enterprise_application_platform:8.0::el9 |
before 0:2.2.21-3.redhat_00002.1.el9eap | 0:2.2.21-3.redhat_00002.1.el9eap |
eap8-slf4jRed Hat:jboss_enterprise_application_platform:8.0::el9 |
before 0:2.0.17-1.redhat_00001.1.el9eap | 0:2.0.17-1.redhat_00001.1.el9eap |
eap8-slf4j-apiRed Hat:jboss_enterprise_application_platform:8.0::el9 |
before 0:2.0.17-1.redhat_00001.1.el9eap | 0:2.0.17-1.redhat_00001.1.el9eap |
eap8-velocityRed Hat:jboss_enterprise_application_platform:8.0::el9 |
before 0:2.3.0-4.redhat_00010.1.el9eap | 0:2.3.0-4.redhat_00010.1.el9eap |
eap8-velocity-engine-coreRed Hat:jboss_enterprise_application_platform:8.0::el9 |
before 0:2.3.0-4.redhat_00010.1.el9eap | 0:2.3.0-4.redhat_00010.1.el9eap |
eap8-wildflyRed Hat:jboss_enterprise_application_platform:8.0::el9 |
before 0:8.0.8-4.GA_redhat_00006.1.el9eap | 0:8.0.8-4.GA_redhat_00006.1.el9eap |
eap8-wildfly-elytronRed Hat:jboss_enterprise_application_platform:8.0::el9 |
before 0:2.2.11-1.Final_redhat_00001.1.el9eap | 0:2.2.11-1.Final_redhat_00001.1.el9eap |
eap8-wildfly-elytron-toolRed Hat:jboss_enterprise_application_platform:8.0::el9 |
before 0:2.2.11-1.Final_redhat_00001.1.el9eap | 0:2.2.11-1.Final_redhat_00001.1.el9eap |
eap8-wildfly-java-jdk11Red Hat:jboss_enterprise_application_platform:8.0::el9 |
before 0:8.0.8-4.GA_redhat_00006.1.el9eap | 0:8.0.8-4.GA_redhat_00006.1.el9eap |
eap8-wildfly-java-jdk17Red Hat:jboss_enterprise_application_platform:8.0::el9 |
before 0:8.0.8-4.GA_redhat_00006.1.el9eap | 0:8.0.8-4.GA_redhat_00006.1.el9eap |
eap8-wildfly-java-jdk21Red Hat:jboss_enterprise_application_platform:8.0::el9 |
before 0:8.0.8-4.GA_redhat_00006.1.el9eap | 0:8.0.8-4.GA_redhat_00006.1.el9eap |
eap8-wildfly-modulesRed Hat:jboss_enterprise_application_platform:8.0::el9 |
before 0:8.0.8-4.GA_redhat_00006.1.el9eap | 0:8.0.8-4.GA_redhat_00006.1.el9eap |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2025-27611 is a high vulnerability (CVSS 8.7) in Cryptocoinjs Base-x, published April 30, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.45%, the 39th percentile. Fixed in base-x 5.0.1.
References
github.com/cryptocoinjs/base-x/security/advisories/GHSA-xq7p-g2vc-g82p
github.com/cryptocoinjs/base-x/pull/86
nvd.nist.gov/vuln/detail/CVE-2025-27611
github.com/advisories/GHSA-xq7p-g2vc-g82p
github.com/CVEProject/cvelistV5/tree/main/cves/2025/27xxx/CVE-2025-27611.json
github.com/cryptocoinjs/base-x
Show 52 moreShow less
access.redhat.com/errata/RHSA-2025:10452
access.redhat.com/security/updates/classification
docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/8.0
access.redhat.com/articles/7120566
bugzilla.redhat.com/show_bug.cgi?id=2339095
bugzilla.redhat.com/show_bug.cgi?id=2351678
bugzilla.redhat.com/show_bug.cgi?id=2355685
bugzilla.redhat.com/show_bug.cgi?id=2363176
bugzilla.redhat.com/show_bug.cgi?id=2368956
issues.redhat.com/browse/JBEAP-28866
issues.redhat.com/browse/JBEAP-28992
issues.redhat.com/browse/JBEAP-29252
issues.redhat.com/browse/JBEAP-29257
issues.redhat.com/browse/JBEAP-29530
issues.redhat.com/browse/JBEAP-29679
issues.redhat.com/browse/JBEAP-29691
issues.redhat.com/browse/JBEAP-29692
issues.redhat.com/browse/JBEAP-29806
issues.redhat.com/browse/JBEAP-29863
issues.redhat.com/browse/JBEAP-29867
issues.redhat.com/browse/JBEAP-29984
issues.redhat.com/browse/JBEAP-29999
issues.redhat.com/browse/JBEAP-30087
issues.redhat.com/browse/JBEAP-30151
issues.redhat.com/browse/JBEAP-30157
issues.redhat.com/browse/JBEAP-30263
security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10452.json
access.redhat.com/security/cve/CVE-2025-2251
cve.org/CVERecord?id=CVE-2025-2251
nvd.nist.gov/vuln/detail/CVE-2025-2251
github.com/wildfly/wildfly/pull/18872
github.com/wildfly/wildfly/releases/tag/36.0.0.Final
issues.redhat.com/browse/WFLY-20550
access.redhat.com/security/cve/CVE-2025-2901
cve.org/CVERecord?id=CVE-2025-2901
nvd.nist.gov/vuln/detail/CVE-2025-2901
access.redhat.com/security/cve/CVE-2025-23184
cve.org/CVERecord?id=CVE-2025-23184
nvd.nist.gov/vuln/detail/CVE-2025-23184
lists.apache.org/thread/lfs8l63rnctnj2skfrxyys7v8fgnt122
access.redhat.com/security/cve/CVE-2025-27611
cve.org/CVERecord?id=CVE-2025-27611
access.redhat.com/security/cve/CVE-2025-48734
cve.org/CVERecord?id=CVE-2025-48734
nvd.nist.gov/vuln/detail/CVE-2025-48734
github.com/advisories/GHSA-wxr5-93ph-8wr9
github.com/apache/commons-beanutils/commit/28ad955a1613ed5885870cc7da52093c1ce739dc
lists.apache.org/thread/s0hb3jkfj5f3ryx6c57zqtfohb0of1g9
openwall.com/lists/oss-security/2025/05/28/6
access.redhat.com/errata/RHSA-2025:10453
issues.redhat.com/browse/JBEAP-29253
security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10453.json