Every CVE Search/ Get API key

CVE-2025-47151

A type confusion vulnerability exists in the lasso_node_impl_init_from_xml functionality of Entr&...

9.8 CriticalFix available

A type confusion vulnerability exists in the lasso_node_impl_init_from_xml functionality of Entr'ouvert Lasso 2.5.1 and 2.8.2. A specially crafted SAML response can lead to an arbitrary code execution. An attacker can send a malformed SAML response to trigger this vulnerability.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

1.09%Up 1.0 points since Nov 6, 2025
90%50%10%1%

What each source reports

CVE List Score used 9.8

A type confusion vulnerability exists in the lasso_node_impl_init_from_xml functionality of Entr'ouvert Lasso 2.5.1 and 2.8.2. A specially crafted SAML response can lead to an arbitrary code execution. An attacker can send a malformed SAML response to trigger this vulnerability.

Record
CVE-2025-47151
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-843
Updated
2026-11-02
EUVDEUVD-2025-37768 9.8

A type confusion vulnerability exists in the lasso_node_impl_init_from_xml functionality of Entr'ouvert Lasso 2.5.1 and 2.8.2. A specially crafted SAML response can lead to an arbitrary code execution. An attacker can send a malformed SAML response to trigger this vulnerability.

Record
EUVD-2025-37768
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-j9px-r24r-fm3p 9.6

A type confusion vulnerability exists in the lasso_node_impl_init_from_xml functionality of Entr&...

A type confusion vulnerability exists in the lasso_node_impl_init_from_xml functionality of Entr'ouvert Lasso 2.5.1 and 2.8.2. A specially crafted SAML response can lead to an arbitrary code execution. An attacker can send a malformed SAML response to trigger this vulnerability.

Record
GHSA-j9px-r24r-fm3p
CVSS 3.1
9.6 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Weakness
CWE-843
Updated
2026-11-02
NVD 9.8

A type confusion vulnerability exists in the lasso_node_impl_init_from_xml functionality of Entr'ouvert Lasso 2.5.1 and 2.8.2. A specially crafted SAML response can lead to an arbitrary code execution. An attacker can send a malformed SAML response to trigger this vulnerability.

Record
CVE-2025-47151
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-843
Updated
2026-11-02
OSV 9.8

A type confusion vulnerability exists in the lasso_node_impl_init_from_xml functionality of Entr'ouvert Lasso 2.5.1 and 2.8.2. A specially crafted SAML response can lead to an arbitrary code execution. An attacker can send a malformed SAML response to trigger this vulnerability.

Record
CVE-2025-47151
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2025-47151 9.8

A type confusion vulnerability exists in the lasso_node_impl_init_from_xml functionality of Entr'ouvert Lasso 2.5.1 and 2.8.2. A specially crafted SAML response can lead to an arbitrary code execution. An attacker can send a malformed SAML response to trigger this vulnerability.

Record
DEBIAN-CVE-2025-47151
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 31 moreShow less
OSVOESA-2025-2662 9.8

lasso security update

The package is a implements the Liberty Alliance Single Sign On standards library, includeing the SAML2 and SAML specifications. it provides bindings for multiple languages.and allows to handle the whole life-cycle of SAML based Federations.

Security Fix(es):

A denial of service vulnerability exists in the lasso_provider_verify_saml_signature functionality of Entr'ouvert Lasso 2.5.1. A specially crafted SAML response can lead to a denial of service. An attacker can send a malformed SAML response to trigger this vulnerability.(CVE-2025-46404)

A denial of service vulnerability exists in the g_assert_not_reached functionality of Entr ouvert Lasso 2.5.1 and 2.8.2. A specially crafted SAML assertion response can lead to a denial of service. An attacker can send a malformed SAML response to trigger this vulnerability.(CVE-2025-46705)

A denial of service vulnerability exists in the lasso_node_init_from_message_with_format functionality of Entr ouvert Lasso 2.5.1. A specially crafted SAML response can lead to a memory depletion, resulting in denial of service. An attacker can send a malformed SAML response to trigger this vulnerability.(CVE-2025-46784)

A type confusion vulnerability exists in the lasso_node_impl_init_from_xml functionality of Entr'ouvert Lasso 2.5.1 and 2.8.2. A specially crafted SAML response can lead to an arbitrary code execution. An attacker can send a malformed SAML response to trigger this vulnerability.(CVE-2025-47151)

Record
OESA-2025-2662
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2025-2663 9.8

lasso security update

The package is a implements the Liberty Alliance Single Sign On standards library, includeing the SAML2 and SAML specifications. it provides bindings for multiple languages.and allows to handle the whole life-cycle of SAML based Federations.

Security Fix(es):

A denial of service vulnerability exists in the lasso_provider_verify_saml_signature functionality of Entr'ouvert Lasso 2.5.1. A specially crafted SAML response can lead to a denial of service. An attacker can send a malformed SAML response to trigger this vulnerability.(CVE-2025-46404)

A denial of service vulnerability exists in the g_assert_not_reached functionality of Entr ouvert Lasso 2.5.1 and 2.8.2. A specially crafted SAML assertion response can lead to a denial of service. An attacker can send a malformed SAML response to trigger this vulnerability.(CVE-2025-46705)

A type confusion vulnerability exists in the lasso_node_impl_init_from_xml functionality of Entr'ouvert Lasso 2.5.1 and 2.8.2. A specially crafted SAML response can lead to an arbitrary code execution. An attacker can send a malformed SAML response to trigger this vulnerability.(CVE-2025-47151)

Record
OESA-2025-2663
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2025-2664 9.8

lasso security update

The package is a implements the Liberty Alliance Single Sign On standards library, includeing the SAML2 and SAML specifications. it provides bindings for multiple languages.and allows to handle the whole life-cycle of SAML based Federations.

Security Fix(es):

A denial of service vulnerability exists in the lasso_provider_verify_saml_signature functionality of Entr'ouvert Lasso 2.5.1. A specially crafted SAML response can lead to a denial of service. An attacker can send a malformed SAML response to trigger this vulnerability.(CVE-2025-46404)

A denial of service vulnerability exists in the g_assert_not_reached functionality of Entr ouvert Lasso 2.5.1 and 2.8.2. A specially crafted SAML assertion response can lead to a denial of service. An attacker can send a malformed SAML response to trigger this vulnerability.(CVE-2025-46705)

A type confusion vulnerability exists in the lasso_node_impl_init_from_xml functionality of Entr'ouvert Lasso 2.5.1 and 2.8.2. A specially crafted SAML response can lead to an arbitrary code execution. An attacker can send a malformed SAML response to trigger this vulnerability.(CVE-2025-47151)

Record
OESA-2025-2664
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2025-2665 9.8

lasso security update

The package is a implements the Liberty Alliance Single Sign On standards library, includeing the SAML2 and SAML specifications. it provides bindings for multiple languages.and allows to handle the whole life-cycle of SAML based Federations.

Security Fix(es):

A denial of service vulnerability exists in the lasso_provider_verify_saml_signature functionality of Entr'ouvert Lasso 2.5.1. A specially crafted SAML response can lead to a denial of service. An attacker can send a malformed SAML response to trigger this vulnerability.(CVE-2025-46404)

A denial of service vulnerability exists in the g_assert_not_reached functionality of Entr ouvert Lasso 2.5.1 and 2.8.2. A specially crafted SAML assertion response can lead to a denial of service. An attacker can send a malformed SAML response to trigger this vulnerability.(CVE-2025-46705)

A type confusion vulnerability exists in the lasso_node_impl_init_from_xml functionality of Entr'ouvert Lasso 2.5.1 and 2.8.2. A specially crafted SAML response can lead to an arbitrary code execution. An attacker can send a malformed SAML response to trigger this vulnerability.(CVE-2025-47151)

Record
OESA-2025-2665
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2025-2666 9.8

lasso security update

The package is a implements the Liberty Alliance Single Sign On standards library, includeing the SAML2 and SAML specifications. it provides bindings for multiple languages.and allows to handle the whole life-cycle of SAML based Federations.

Security Fix(es):

A denial of service vulnerability exists in the lasso_provider_verify_saml_signature functionality of Entr'ouvert Lasso 2.5.1. A specially crafted SAML response can lead to a denial of service. An attacker can send a malformed SAML response to trigger this vulnerability.(CVE-2025-46404)

A denial of service vulnerability exists in the g_assert_not_reached functionality of Entr ouvert Lasso 2.5.1 and 2.8.2. A specially crafted SAML assertion response can lead to a denial of service. An attacker can send a malformed SAML response to trigger this vulnerability.(CVE-2025-46705)

A denial of service vulnerability exists in the lasso_node_init_from_message_with_format functionality of Entr ouvert Lasso 2.5.1. A specially crafted SAML response can lead to a memory depletion, resulting in denial of service. An attacker can send a malformed SAML response to trigger this vulnerability.(CVE-2025-46784)

A type confusion vulnerability exists in the lasso_node_impl_init_from_xml functionality of Entr'ouvert Lasso 2.5.1 and 2.8.2. A specially crafted SAML response can lead to an arbitrary code execution. An attacker can send a malformed SAML response to trigger this vulnerability.(CVE-2025-47151)

Record
OESA-2025-2666
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:21399 9.8

Red Hat Security Advisory: lasso security update

Record
RHSA-2025:21399
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:21400 9.8

Red Hat Security Advisory: lasso security update

Record
RHSA-2025:21400
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:21401 9.8

Red Hat Security Advisory: lasso security update

Record
RHSA-2025:21401
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:21402 9.8

Red Hat Security Advisory: lasso security update

Record
RHSA-2025:21402
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:21403 9.8

Red Hat Security Advisory: lasso security update

Record
RHSA-2025:21403
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:21404 9.8

Red Hat Security Advisory: lasso security update

Record
RHSA-2025:21404
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:21405 9.8

Red Hat Security Advisory: lasso security update

Record
RHSA-2025:21405
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:21406 9.8

Red Hat Security Advisory: lasso security update

Record
RHSA-2025:21406
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:21452 9.8

Red Hat Security Advisory: lasso security update

Record
RHSA-2025:21452
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:21462 9.8

Red Hat Security Advisory: lasso security update

Record
RHSA-2025:21462
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:21628 9.8

Red Hat Security Advisory: lasso security update

Record
RHSA-2025:21628
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2025:21462 9.8

Critical: lasso security update

The lasso packages provide the Lasso library that implements the Liberty Alliance Single Sign-On standards, including the SAML and SAML2 specifications. It allows handling of the whole life-cycle of SAML-based federations and provides bindings for multiple languages.

Security Fix(es):

  • lasso: Type confusion in Entr'ouvert Lasso (CVE-2025-47151)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2025:21462
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2025:21628 9.8

Critical: lasso security update

The lasso packages provide the Lasso library that implements the Liberty Alliance Single Sign-On standards, including the SAML and SAML2 specifications. It allows handling of the whole life-cycle of SAML-based federations and provides bindings for multiple languages.

Security Fix(es):

  • lasso: Type confusion in Entr'ouvert Lasso (CVE-2025-47151)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2025:21628
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2025-47151 9.8

A type confusion vulnerability exists in the lasso_node_impl_init_from_xml functionality of Entr'ouvert Lasso 2.5.1 and 2.8.2. A specially crafted SAML response can lead to an arbitrary code execution. An attacker can send a malformed SAML response to trigger this vulnerability.

Record
UBUNTU-CVE-2025-47151
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVALSA-2025:21462 No score

Critical: lasso security update

The lasso packages provide the Lasso library that implements the Liberty Alliance Single Sign-On standards, including the SAML and SAML2 specifications. It allows handling of the whole life-cycle of SAML-based federations and provides bindings for multiple languages.

Security Fix(es):

  • lasso: Type confusion in Entr'ouvert Lasso (CVE-2025-47151)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2025:21462
Updated
2026-11-02
OSVALSA-2025:21628 No score

Critical: lasso security update

The lasso packages provide the Lasso library that implements the Liberty Alliance Single Sign-On standards, including the SAML and SAML2 specifications. It allows handling of the whole life-cycle of SAML-based federations and provides bindings for multiple languages.

Security Fix(es):

  • lasso: Type confusion in Entr'ouvert Lasso (CVE-2025-47151)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2025:21628
Updated
2026-11-02
OSVAZL-69850 No score

CVE-2025-47151 affecting package lasso for versions less than 2.9.0-1

A type confusion vulnerability exists in the lasso_node_impl_init_from_xml functionality of Entr'ouvert Lasso 2.5.1 and 2.8.2. A specially crafted SAML response can lead to an arbitrary code execution. An attacker can send a malformed SAML response to trigger this vulnerability.

Record
AZL-69850
Updated
2026-11-02
OSVAZL-69863 No score

CVE-2025-47151 affecting package lasso 2.8.0-1

A type confusion vulnerability exists in the lasso_node_impl_init_from_xml functionality of Entr'ouvert Lasso 2.5.1 and 2.8.2. A specially crafted SAML response can lead to an arbitrary code execution. An attacker can send a malformed SAML response to trigger this vulnerability.

Record
AZL-69863
Updated
2026-11-02
OSVCLSA-2025-1764677738 No score

lasso: Fix of CVE-2025-47151

  • CVE-2025-47151: fix type confusion vulnerability in the lasso_node_impl_init_from_xml functionality
Record
CLSA-2025-1764677738
Updated
2026-11-02
OSVCLSA-2025-1765478656 No score

lasso: Fix of CVE-2025-47151

  • CVE-2025-47151: fix type confusion vulnerability in the lasso_node_impl_init_from_xml functionality
Record
CLSA-2025-1765478656
Updated
2026-11-02
OSVopenSUSE-SU-2025:20083-1 No score

Security update for lasso

This update for lasso fixes the following issues:

  • CVE-2025-46404: specially crafted SAML response can lead to a denial of service (bsc#1253092).
  • CVE-2025-46705: specially crafted SAML assertion response can lead to a denial of service (bsc#1253093).
  • CVE-2025-47151: type confusion vulnerability exists in the lasso_node_impl_init_from_xml functionality can lead to an arbitrary code execution (bsc#1253095).
Record
openSUSE-SU-2025:20083-1
Updated
2026-11-02
OSVSUSE-SU-2025:21140-1 No score

Security update for lasso

This update for lasso fixes the following issues:

  • CVE-2025-46404: specially crafted SAML response can lead to a denial of service (bsc#1253092).
  • CVE-2025-46705: specially crafted SAML assertion response can lead to a denial of service (bsc#1253093).
  • CVE-2025-47151: type confusion vulnerability exists in the lasso_node_impl_init_from_xml functionality can lead to an arbitrary code execution (bsc#1253095).
Record
SUSE-SU-2025:21140-1
Updated
2026-11-02
OSVSUSE-SU-2025:4068-1 No score

Security update for lasso

This update for lasso fixes the following issues:

  • CVE-2025-46404: Fixed denial of service in Entr'ouvert Lasso (bsc#1253092)
  • CVE-2025-46705: Fixed denial of service in Entr'ouvert Lasso (bsc#1253093)
  • CVE-2025-47151: Fixed type confusion vulnerability in the lasso_node_impl_init_from_xml functionality (bsc#1253095)
Record
SUSE-SU-2025:4068-1
Updated
2026-11-02
OSVSUSE-SU-2025:4090-1 No score

Security update for lasso

This update for lasso fixes the following issues:

  • CVE-2025-46784: Fixed memory exhaustion in Entr'ouvert Lasso (bsc#1253094)
  • CVE-2025-46404: Fixed denial of service in Entr'ouvert Lasso (bsc#1253092)
  • CVE-2025-46705: Fixed denial of service in Entr'ouvert Lasso (bsc#1253093)
  • CVE-2025-47151: Fixed type confusion vulnerability in the lasso_node_impl_init_from_xml functionality (bsc#1253095)
Record
SUSE-SU-2025:4090-1
Updated
2026-11-02
OSVSUSE-SU-2025:4094-1 No score

Security update for lasso

This update for lasso fixes the following issues:

  • CVE-2025-46784: Fixed memory exhaustion in Entr'ouvert Lasso (bsc#1253094)
  • CVE-2025-46404: Fixed denial of service in Entr'ouvert Lasso (bsc#1253092)
  • CVE-2025-46705: Fixed denial of service in Entr'ouvert Lasso (bsc#1253093)
  • CVE-2025-47151: Fixed type confusion vulnerability in the lasso_node_impl_init_from_xml functionality (bsc#1253095)
Record
SUSE-SU-2025:4094-1
Updated
2026-11-02
OSVUSN-7872-1 No score

lasso vulnerabilities

It was discovered that Lasso incorrectly handled certain malformed SAML responses. A remote attacker could possibly use this issue to cause Lasso to crash, resulting in a denial of service. (CVE-2025-46404)

It was discovered that Lasso incorrectly handled certain malformed SAML assertion responses. A remote attacker could possibly use this issue to cause Lasso to crash, resulting in a denial of service. (CVE-2025-46705)

It was discovered that Lasso incorrectly handled certain malformed SAML responses. A remote attacker could possibly use this issue to cause Lasso to consume memory, resulting in a denial of service. This issue only affected Ubuntu 22.04 LTS. (CVE-2025-46784)

It was discovered that Lasso incorrectly handled certain malformed SAML responses. A remote attacker could use this issue to cause Lasso to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2025-47151)

Record
USN-7872-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
lasso
AlmaLinux:9
 before 2.7.0-11.el9_7.3
2.7.0-11.el9_7.3
lasso-devel
AlmaLinux:9
 before 2.7.0-11.el9_7.3
2.7.0-11.el9_7.3
python3-lasso
AlmaLinux:9
 before 2.7.0-11.el9_7.3
2.7.0-11.el9_7.3
lasso
AlmaLinux:8
 before 2.6.0-14.el8_10
2.6.0-14.el8_10
lasso-devel
AlmaLinux:8
 before 2.6.0-14.el8_10
2.6.0-14.el8_10
python3-lasso
AlmaLinux:8
 before 2.6.0-14.el8_10
2.6.0-14.el8_10
lasso
Azure Linux:3
 before 2.9.0-1
2.9.0-1
lasso
Azure Linux:2
 through 2.8.0-1 None known
lasso
TuxCare:AlmaLinux:9.2
 before 2.7.0-11.el9.tuxcare.els1
2.7.0-11.el9.tuxcare.els1
lasso-devel
TuxCare:AlmaLinux:9.2
 before 2.7.0-11.el9.tuxcare.els1
2.7.0-11.el9.tuxcare.els1
Show 161 moreShow less
Affected packages
PackageAffectedFixed
perl-lasso
TuxCare:AlmaLinux:9.2
 before 2.7.0-11.el9.tuxcare.els1
2.7.0-11.el9.tuxcare.els1
python3-lasso
TuxCare:AlmaLinux:9.2
 before 2.7.0-11.el9.tuxcare.els1
2.7.0-11.el9.tuxcare.els1
lasso
TuxCare:AlmaLinux:9.6
 before 2.7.0-11.el9.tuxcare.els1
2.7.0-11.el9.tuxcare.els1
lasso-devel
TuxCare:AlmaLinux:9.6
 before 2.7.0-11.el9.tuxcare.els1
2.7.0-11.el9.tuxcare.els1
perl-lasso
TuxCare:AlmaLinux:9.6
 before 2.7.0-11.el9.tuxcare.els1
2.7.0-11.el9.tuxcare.els1
python3-lasso
TuxCare:AlmaLinux:9.6
 before 2.7.0-11.el9.tuxcare.els1
2.7.0-11.el9.tuxcare.els1
lasso
Debian:12
 before 2.8.1-1+deb12u1, plus listed versions
2.8.1-1
2.8.1-1+deb12u1
lasso
Debian:13
 before 2.8.2-9+deb13u1, plus listed versions
2.8.2-9
2.8.2-9+deb13u1
lasso
Debian:14
 before 2.9.0-1, plus listed versions
2.8.2-9
2.9.0-1
lasso
Debian:11
From an advisory covering 4 CVEs
 before 2.6.1-3+deb11u1, plus listed versions
2.6.1-3
2.6.1-3+deb11u1
lasso
Debian:12
From an advisory covering 3 CVEs
 before 2.8.1-1+deb12u1, plus listed versions
2.8.1-1
2.8.1-1+deb12u1
lasso
Debian:13
From an advisory covering 3 CVEs
 before 2.8.2-9+deb13u1, plus listed versions
2.8.2-9
2.8.2-9+deb13u1
lasso
openEuler:22.03-LTS-SP4
From an advisory covering 4 CVEs
 before 2.7.0-2.oe2203sp4
2.7.0-2.oe2203sp4
lasso
openEuler:24.03-LTS
From an advisory covering 3 CVEs
 before 2.8.2-3.oe2403
2.8.2-3.oe2403
lasso
openEuler:24.03-LTS-SP1
From an advisory covering 3 CVEs
 before 2.8.2-3.oe2403sp1
2.8.2-3.oe2403sp1
lasso
openEuler:24.03-LTS-SP2
From an advisory covering 3 CVEs
 before 2.8.2-3.oe2403sp2
2.8.2-3.oe2403sp2
lasso
openEuler:22.03-LTS-SP3
From an advisory covering 4 CVEs
 before 2.7.0-2.oe2203sp3
2.7.0-2.oe2203sp3
java-lasso-debuginfo
Red Hat:rhel_aus:8.2::appstream
 before 0:2.6.0-8.el8_2.1
0:2.6.0-8.el8_2.1
lasso
Red Hat:rhel_aus:8.2::appstream
 before 0:2.6.0-8.el8_2.1
0:2.6.0-8.el8_2.1
lasso-debuginfo
Red Hat:rhel_aus:8.2::appstream
 before 0:2.6.0-8.el8_2.1
0:2.6.0-8.el8_2.1
lasso-debugsource
Red Hat:rhel_aus:8.2::appstream
 before 0:2.6.0-8.el8_2.1
0:2.6.0-8.el8_2.1
perl-lasso-debuginfo
Red Hat:rhel_aus:8.2::appstream
 before 0:2.6.0-8.el8_2.1
0:2.6.0-8.el8_2.1
python3-lasso-debuginfo
Red Hat:rhel_aus:8.2::appstream
 before 0:2.6.0-8.el8_2.1
0:2.6.0-8.el8_2.1
java-lasso-debuginfo
Red Hat:rhel_e4s:8.8::appstream
 before 0:2.6.0-13.el8_8.1
0:2.6.0-13.el8_8.1
lasso
Red Hat:rhel_e4s:8.8::appstream
 before 0:2.6.0-13.el8_8.1
0:2.6.0-13.el8_8.1
lasso-debuginfo
Red Hat:rhel_e4s:8.8::appstream
 before 0:2.6.0-13.el8_8.1
0:2.6.0-13.el8_8.1
lasso-debugsource
Red Hat:rhel_e4s:8.8::appstream
 before 0:2.6.0-13.el8_8.1
0:2.6.0-13.el8_8.1
perl-lasso-debuginfo
Red Hat:rhel_e4s:8.8::appstream
 before 0:2.6.0-13.el8_8.1
0:2.6.0-13.el8_8.1
python3-lasso
Red Hat:rhel_e4s:8.8::appstream
 before 0:2.6.0-13.el8_8.1
0:2.6.0-13.el8_8.1
python3-lasso-debuginfo
Red Hat:rhel_e4s:8.8::appstream
 before 0:2.6.0-13.el8_8.1
0:2.6.0-13.el8_8.1
java-lasso-debuginfo
Red Hat:rhel_tus:8.8::appstream
 before 0:2.6.0-13.el8_8.1
0:2.6.0-13.el8_8.1
lasso
Red Hat:rhel_tus:8.8::appstream
 before 0:2.6.0-13.el8_8.1
0:2.6.0-13.el8_8.1
lasso-debuginfo
Red Hat:rhel_tus:8.8::appstream
 before 0:2.6.0-13.el8_8.1
0:2.6.0-13.el8_8.1
lasso-debugsource
Red Hat:rhel_tus:8.8::appstream
 before 0:2.6.0-13.el8_8.1
0:2.6.0-13.el8_8.1
perl-lasso-debuginfo
Red Hat:rhel_tus:8.8::appstream
 before 0:2.6.0-13.el8_8.1
0:2.6.0-13.el8_8.1
python3-lasso
Red Hat:rhel_tus:8.8::appstream
 before 0:2.6.0-13.el8_8.1
0:2.6.0-13.el8_8.1
python3-lasso-debuginfo
Red Hat:rhel_tus:8.8::appstream
 before 0:2.6.0-13.el8_8.1
0:2.6.0-13.el8_8.1
java-lasso-debuginfo
Red Hat:rhel_aus:8.6::appstream
 before 0:2.6.0-12.el8_6.1
0:2.6.0-12.el8_6.1
lasso
Red Hat:rhel_aus:8.6::appstream
 before 0:2.6.0-12.el8_6.1
0:2.6.0-12.el8_6.1
lasso-debuginfo
Red Hat:rhel_aus:8.6::appstream
 before 0:2.6.0-12.el8_6.1
0:2.6.0-12.el8_6.1
lasso-debugsource
Red Hat:rhel_aus:8.6::appstream
 before 0:2.6.0-12.el8_6.1
0:2.6.0-12.el8_6.1
perl-lasso-debuginfo
Red Hat:rhel_aus:8.6::appstream
 before 0:2.6.0-12.el8_6.1
0:2.6.0-12.el8_6.1
python3-lasso-debuginfo
Red Hat:rhel_aus:8.6::appstream
 before 0:2.6.0-12.el8_6.1
0:2.6.0-12.el8_6.1
java-lasso-debuginfo
Red Hat:rhel_e4s:8.6::appstream
 before 0:2.6.0-12.el8_6.1
0:2.6.0-12.el8_6.1
lasso
Red Hat:rhel_e4s:8.6::appstream
 before 0:2.6.0-12.el8_6.1
0:2.6.0-12.el8_6.1
lasso-debuginfo
Red Hat:rhel_e4s:8.6::appstream
 before 0:2.6.0-12.el8_6.1
0:2.6.0-12.el8_6.1
lasso-debugsource
Red Hat:rhel_e4s:8.6::appstream
 before 0:2.6.0-12.el8_6.1
0:2.6.0-12.el8_6.1
perl-lasso-debuginfo
Red Hat:rhel_e4s:8.6::appstream
 before 0:2.6.0-12.el8_6.1
0:2.6.0-12.el8_6.1
python3-lasso-debuginfo
Red Hat:rhel_e4s:8.6::appstream
 before 0:2.6.0-12.el8_6.1
0:2.6.0-12.el8_6.1
java-lasso-debuginfo
Red Hat:rhel_tus:8.6::appstream
 before 0:2.6.0-12.el8_6.1
0:2.6.0-12.el8_6.1
lasso
Red Hat:rhel_tus:8.6::appstream
 before 0:2.6.0-12.el8_6.1
0:2.6.0-12.el8_6.1
lasso-debuginfo
Red Hat:rhel_tus:8.6::appstream
 before 0:2.6.0-12.el8_6.1
0:2.6.0-12.el8_6.1
lasso-debugsource
Red Hat:rhel_tus:8.6::appstream
 before 0:2.6.0-12.el8_6.1
0:2.6.0-12.el8_6.1
perl-lasso-debuginfo
Red Hat:rhel_tus:8.6::appstream
 before 0:2.6.0-12.el8_6.1
0:2.6.0-12.el8_6.1
python3-lasso-debuginfo
Red Hat:rhel_tus:8.6::appstream
 before 0:2.6.0-12.el8_6.1
0:2.6.0-12.el8_6.1
java-lasso-debuginfo
Red Hat:rhel_aus:8.4::appstream
 before 0:2.6.0-8.el8_4.1
0:2.6.0-8.el8_4.1
lasso
Red Hat:rhel_aus:8.4::appstream
 before 0:2.6.0-8.el8_4.1
0:2.6.0-8.el8_4.1
lasso-debuginfo
Red Hat:rhel_aus:8.4::appstream
 before 0:2.6.0-8.el8_4.1
0:2.6.0-8.el8_4.1
lasso-debugsource
Red Hat:rhel_aus:8.4::appstream
 before 0:2.6.0-8.el8_4.1
0:2.6.0-8.el8_4.1
perl-lasso-debuginfo
Red Hat:rhel_aus:8.4::appstream
 before 0:2.6.0-8.el8_4.1
0:2.6.0-8.el8_4.1
python3-lasso-debuginfo
Red Hat:rhel_aus:8.4::appstream
 before 0:2.6.0-8.el8_4.1
0:2.6.0-8.el8_4.1
java-lasso-debuginfo
Red Hat:rhel_eus_long_life:8.4::appstream
 before 0:2.6.0-8.el8_4.1
0:2.6.0-8.el8_4.1
lasso
Red Hat:rhel_eus_long_life:8.4::appstream
 before 0:2.6.0-8.el8_4.1
0:2.6.0-8.el8_4.1
lasso-debuginfo
Red Hat:rhel_eus_long_life:8.4::appstream
 before 0:2.6.0-8.el8_4.1
0:2.6.0-8.el8_4.1
lasso-debugsource
Red Hat:rhel_eus_long_life:8.4::appstream
 before 0:2.6.0-8.el8_4.1
0:2.6.0-8.el8_4.1
perl-lasso-debuginfo
Red Hat:rhel_eus_long_life:8.4::appstream
 before 0:2.6.0-8.el8_4.1
0:2.6.0-8.el8_4.1
python3-lasso-debuginfo
Red Hat:rhel_eus_long_life:8.4::appstream
 before 0:2.6.0-8.el8_4.1
0:2.6.0-8.el8_4.1
lasso
Red Hat:rhel_eus:9.4::appstream
 before 0:2.7.0-11.el9_4.1
0:2.7.0-11.el9_4.1
lasso-debuginfo
Red Hat:rhel_eus:9.4::appstream
 before 0:2.7.0-11.el9_4.1
0:2.7.0-11.el9_4.1
lasso-debugsource
Red Hat:rhel_eus:9.4::appstream
 before 0:2.7.0-11.el9_4.1
0:2.7.0-11.el9_4.1
perl-lasso-debuginfo
Red Hat:rhel_eus:9.4::appstream
 before 0:2.7.0-11.el9_4.1
0:2.7.0-11.el9_4.1
python3-lasso
Red Hat:rhel_eus:9.4::appstream
 before 0:2.7.0-11.el9_4.1
0:2.7.0-11.el9_4.1
python3-lasso-debuginfo
Red Hat:rhel_eus:9.4::appstream
 before 0:2.7.0-11.el9_4.1
0:2.7.0-11.el9_4.1
lasso-debuginfo
Red Hat:rhel_eus:9.4::crb
 before 0:2.7.0-11.el9_4.1
0:2.7.0-11.el9_4.1
lasso-debugsource
Red Hat:rhel_eus:9.4::crb
 before 0:2.7.0-11.el9_4.1
0:2.7.0-11.el9_4.1
lasso-devel
Red Hat:rhel_eus:9.4::crb
 before 0:2.7.0-11.el9_4.1
0:2.7.0-11.el9_4.1
perl-lasso-debuginfo
Red Hat:rhel_eus:9.4::crb
 before 0:2.7.0-11.el9_4.1
0:2.7.0-11.el9_4.1
python3-lasso-debuginfo
Red Hat:rhel_eus:9.4::crb
 before 0:2.7.0-11.el9_4.1
0:2.7.0-11.el9_4.1
lasso
Red Hat:rhel_els:7
 before 0:2.5.1-8.el7_9.1
0:2.5.1-8.el7_9.1
lasso-debuginfo
Red Hat:rhel_els:7
 before 0:2.5.1-8.el7_9.1
0:2.5.1-8.el7_9.1
lasso-python
Red Hat:rhel_els:7
 before 0:2.5.1-8.el7_9.1
0:2.5.1-8.el7_9.1
lasso-devel
Red Hat:rhel_els:7
 before 0:2.5.1-8.el7_9.1
0:2.5.1-8.el7_9.1
lasso
Red Hat:rhel_e4s:9.0::appstream
 before 0:2.7.0-9.el9_0.1
0:2.7.0-9.el9_0.1
lasso-debuginfo
Red Hat:rhel_e4s:9.0::appstream
 before 0:2.7.0-9.el9_0.1
0:2.7.0-9.el9_0.1
lasso-debugsource
Red Hat:rhel_e4s:9.0::appstream
 before 0:2.7.0-9.el9_0.1
0:2.7.0-9.el9_0.1
perl-lasso-debuginfo
Red Hat:rhel_e4s:9.0::appstream
 before 0:2.7.0-9.el9_0.1
0:2.7.0-9.el9_0.1
python3-lasso-debuginfo
Red Hat:rhel_e4s:9.0::appstream
 before 0:2.7.0-9.el9_0.1
0:2.7.0-9.el9_0.1
lasso
Red Hat:rhel_e4s:9.2::appstream
 before 0:2.7.0-11.el9_2.1
0:2.7.0-11.el9_2.1
lasso-debuginfo
Red Hat:rhel_e4s:9.2::appstream
 before 0:2.7.0-11.el9_2.1
0:2.7.0-11.el9_2.1
lasso-debugsource
Red Hat:rhel_e4s:9.2::appstream
 before 0:2.7.0-11.el9_2.1
0:2.7.0-11.el9_2.1
perl-lasso-debuginfo
Red Hat:rhel_e4s:9.2::appstream
 before 0:2.7.0-11.el9_2.1
0:2.7.0-11.el9_2.1
python3-lasso
Red Hat:rhel_e4s:9.2::appstream
 before 0:2.7.0-11.el9_2.1
0:2.7.0-11.el9_2.1
python3-lasso-debuginfo
Red Hat:rhel_e4s:9.2::appstream
 before 0:2.7.0-11.el9_2.1
0:2.7.0-11.el9_2.1
lasso
Red Hat:rhel_eus:9.6::appstream
 before 0:2.7.0-11.el9_6.2
0:2.7.0-11.el9_6.2
lasso-debuginfo
Red Hat:rhel_eus:9.6::appstream
 before 0:2.7.0-11.el9_6.2
0:2.7.0-11.el9_6.2
lasso-debugsource
Red Hat:rhel_eus:9.6::appstream
 before 0:2.7.0-11.el9_6.2
0:2.7.0-11.el9_6.2
perl-lasso-debuginfo
Red Hat:rhel_eus:9.6::appstream
 before 0:2.7.0-11.el9_6.2
0:2.7.0-11.el9_6.2
python3-lasso
Red Hat:rhel_eus:9.6::appstream
 before 0:2.7.0-11.el9_6.2
0:2.7.0-11.el9_6.2
python3-lasso-debuginfo
Red Hat:rhel_eus:9.6::appstream
 before 0:2.7.0-11.el9_6.2
0:2.7.0-11.el9_6.2
lasso-debuginfo
Red Hat:rhel_eus:9.6::crb
 before 0:2.7.0-11.el9_6.2
0:2.7.0-11.el9_6.2
lasso-debugsource
Red Hat:rhel_eus:9.6::crb
 before 0:2.7.0-11.el9_6.2
0:2.7.0-11.el9_6.2
lasso-devel
Red Hat:rhel_eus:9.6::crb
 before 0:2.7.0-11.el9_6.2
0:2.7.0-11.el9_6.2
perl-lasso-debuginfo
Red Hat:rhel_eus:9.6::crb
 before 0:2.7.0-11.el9_6.2
0:2.7.0-11.el9_6.2
python3-lasso-debuginfo
Red Hat:rhel_eus:9.6::crb
 before 0:2.7.0-11.el9_6.2
0:2.7.0-11.el9_6.2
lasso
Red Hat:enterprise_linux:9::appstream
 before 0:2.7.0-11.el9_7.3
0:2.7.0-11.el9_7.3
lasso-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:2.7.0-11.el9_7.3
0:2.7.0-11.el9_7.3
lasso-debugsource
Red Hat:enterprise_linux:9::appstream
 before 0:2.7.0-11.el9_7.3
0:2.7.0-11.el9_7.3
perl-lasso-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:2.7.0-11.el9_7.3
0:2.7.0-11.el9_7.3
python3-lasso
Red Hat:enterprise_linux:9::appstream
 before 0:2.7.0-11.el9_7.3
0:2.7.0-11.el9_7.3
python3-lasso-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:2.7.0-11.el9_7.3
0:2.7.0-11.el9_7.3
lasso-debuginfo
Red Hat:enterprise_linux:9::crb
 before 0:2.7.0-11.el9_7.3
0:2.7.0-11.el9_7.3
lasso-debugsource
Red Hat:enterprise_linux:9::crb
 before 0:2.7.0-11.el9_7.3
0:2.7.0-11.el9_7.3
lasso-devel
Red Hat:enterprise_linux:9::crb
 before 0:2.7.0-11.el9_7.3
0:2.7.0-11.el9_7.3
perl-lasso-debuginfo
Red Hat:enterprise_linux:9::crb
 before 0:2.7.0-11.el9_7.3
0:2.7.0-11.el9_7.3
python3-lasso-debuginfo
Red Hat:enterprise_linux:9::crb
 before 0:2.7.0-11.el9_7.3
0:2.7.0-11.el9_7.3
java-lasso-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:2.6.0-14.el8_10
0:2.6.0-14.el8_10
lasso
Red Hat:enterprise_linux:8::appstream
 before 0:2.6.0-14.el8_10
0:2.6.0-14.el8_10
lasso-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:2.6.0-14.el8_10
0:2.6.0-14.el8_10
lasso-debugsource
Red Hat:enterprise_linux:8::appstream
 before 0:2.6.0-14.el8_10
0:2.6.0-14.el8_10
perl-lasso-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:2.6.0-14.el8_10
0:2.6.0-14.el8_10
python3-lasso
Red Hat:enterprise_linux:8::appstream
 before 0:2.6.0-14.el8_10
0:2.6.0-14.el8_10
python3-lasso-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:2.6.0-14.el8_10
0:2.6.0-14.el8_10
java-lasso-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:2.6.0-14.el8_10
0:2.6.0-14.el8_10
lasso-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:2.6.0-14.el8_10
0:2.6.0-14.el8_10
lasso-debugsource
Red Hat:enterprise_linux:8::crb
 before 0:2.6.0-14.el8_10
0:2.6.0-14.el8_10
lasso-devel
Red Hat:enterprise_linux:8::crb
 before 0:2.6.0-14.el8_10
0:2.6.0-14.el8_10
perl-lasso-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:2.6.0-14.el8_10
0:2.6.0-14.el8_10
python3-lasso-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:2.6.0-14.el8_10
0:2.6.0-14.el8_10
lasso
Rocky Linux:9
 before 0:2.7.0-11.el9_7.3
0:2.7.0-11.el9_7.3
lasso
Rocky Linux:8
 before 0:2.6.0-14.el8_10
0:2.6.0-14.el8_10
lasso
SUSE:Linux Enterprise Server 16.0
From an advisory covering 3 CVEs
 before 2.8.2-160000.3.1
2.8.2-160000.3.1
lasso
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 3 CVEs
 before 2.8.2-160000.3.1
2.8.2-160000.3.1
lasso
SUSE:Linux Enterprise Module for Package Hub 15 SP6
From an advisory covering 3 CVEs
 before 2.8.2-150600.3.5.1
2.8.2-150600.3.5.1
lasso
SUSE:Linux Enterprise Module for Package Hub 15 SP7
From an advisory covering 3 CVEs
 before 2.8.2-150600.3.5.1
2.8.2-150600.3.5.1
lasso
SUSE:Linux Enterprise Module for Server Applications 15 SP6
From an advisory covering 3 CVEs
 before 2.8.2-150600.3.5.1
2.8.2-150600.3.5.1
lasso
SUSE:Linux Enterprise Module for Server Applications 15 SP7
From an advisory covering 3 CVEs
 before 2.8.2-150600.3.5.1
2.8.2-150600.3.5.1
lasso
openSUSE:Leap 15.6
From an advisory covering 3 CVEs
 before 2.8.2-150600.3.5.1
2.8.2-150600.3.5.1
lasso
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
From an advisory covering 4 CVEs
 before 2.6.1-150200.24.1
2.6.1-150200.24.1
lasso
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 4 CVEs
 before 2.6.1-150200.24.1
2.6.1-150200.24.1
lasso
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 4 CVEs
 before 2.6.1-150200.24.1
2.6.1-150200.24.1
lasso
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 4 CVEs
 before 2.6.1-150200.24.1
2.6.1-150200.24.1
lasso
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
From an advisory covering 4 CVEs
 before 2.6.1-150200.24.1
2.6.1-150200.24.1
lasso
SUSE:Linux Enterprise Server 15 SP3-LTSS
From an advisory covering 4 CVEs
 before 2.6.1-150200.24.1
2.6.1-150200.24.1
lasso
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 4 CVEs
 before 2.6.1-150200.24.1
2.6.1-150200.24.1
lasso
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 4 CVEs
 before 2.6.1-150200.24.1
2.6.1-150200.24.1
lasso
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
From an advisory covering 4 CVEs
 before 2.6.1-150200.24.1
2.6.1-150200.24.1
lasso
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 4 CVEs
 before 2.6.1-150200.24.1
2.6.1-150200.24.1
lasso
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
From an advisory covering 4 CVEs
 before 2.6.1-150200.24.1
2.6.1-150200.24.1
lasso
SUSE:Manager Proxy LTS 4.3
From an advisory covering 4 CVEs
 before 2.6.1-150200.24.1
2.6.1-150200.24.1
lasso
SUSE:Manager Server LTS 4.3
From an advisory covering 4 CVEs
 before 2.6.1-150200.24.1
2.6.1-150200.24.1
lasso
SUSE:Enterprise Storage 7.1
From an advisory covering 4 CVEs
 before 2.6.1-150200.24.1
2.6.1-150200.24.1
lasso
SUSE:Linux Enterprise Server 12 SP5-LTSS
From an advisory covering 4 CVEs
 before 2.6.1-8.12.1
2.6.1-8.12.1
lasso
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
From an advisory covering 4 CVEs
 before 2.6.1-8.12.1
2.6.1-8.12.1
lasso
Ubuntu:16.04:LTS
 All versions, plus listed versions
2.4.1-1build12.5.0-12.5.0-22.5.0-32.5.0-3build12.5.0-3ubuntu2
 None known
lasso
Ubuntu:18.04:LTS
 All versions, plus listed versions
2.5.0-5build42.5.0-5build52.5.0-5ubuntu12.5.1-0ubuntu12.5.1-0ubuntu1.12.5.1-0ubuntu1.2
 None known
lasso
Ubuntu:20.04:LTS
 All versions, plus listed versions
2.6.0-2ubuntu12.6.0-2ubuntu22.6.0-7ubuntu12.6.0-7ubuntu1.12.6.0-7ubuntu1.2
 None known
lasso
Ubuntu:22.04:LTS
 before 2.7.0-2ubuntu0.1, plus listed versions
2.6.1-3build12.6.1-3build32.7.0-12.7.0-22.7.0-2build12.7.0-2build22.7.0-2build3
2.7.0-2ubuntu0.1
lasso
Ubuntu:24.04:LTS
 before 2.8.2-2ubuntu0.1, plus listed versions
2.8.1-12.8.1-1build12.8.1-22.8.2-12.8.2-1build12.8.2-2build12.8.2-2build2
2.8.2-2ubuntu0.1
lasso
Ubuntu:22.04:LTS
From an advisory covering 4 CVEs
 before 2.7.0-2ubuntu0.1, plus listed versions
2.6.1-3build12.6.1-3build32.7.0-12.7.0-22.7.0-2build12.7.0-2build22.7.0-2build3
2.7.0-2ubuntu0.1
lasso
Ubuntu:24.04:LTS
From an advisory covering 4 CVEs
 before 2.8.2-2ubuntu0.1, plus listed versions
2.8.1-12.8.1-1build12.8.1-22.8.2-12.8.2-1build12.8.2-2build12.8.2-2build2
2.8.2-2ubuntu0.1
lasso
openSUSE:Leap 16.0
From an advisory covering 3 CVEs
 before 2.8.2-160000.3.1
2.8.2-160000.3.1

History

History
RecordedChangedSources
affected, facts
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2025-47151 is a critical vulnerability (CVSS 9.8) in Entr'ouvert Lasso, published November 5, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.09%, the 65th percentile. Fixed in lasso 2.7.0-11.el9_7.3.

References

Show 56 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open