{"id":"CVE-2025-22868","aliases":["AZL-57306","AZL-57309","AZL-57312","AZL-57315","AZL-57324","AZL-57335","AZL-57338","AZL-57339","AZL-57344","AZL-57356","AZL-57363","AZL-57384","AZL-57389","AZL-57407","AZL-57410","AZL-57422","AZL-57425","AZL-57443","AZL-57449","AZL-57450","AZL-57453","AZL-57462","AZL-57467","DEBIAN-CVE-2025-22868","EUVD-2025-5341","GHSA-3wqc-mwfx-672p","GHSA-6v2p-p543-phr9","GO-2025-3488","RHSA-2025:3335","RHSA-2025:3593","RHSA-2025:7407","RHSA-2025:7479","RLSA-2025:7479","ROOT-APP-GOBINARY-CVE-2025-22868","SUSE-SU-2025:02014-1","SUSE-SU-2025:02035-1","SUSE-SU-2025:02040-1","SUSE-SU-2025:02041-1","SUSE-SU-2025:02046-1","SUSE-SU-2025:02097-1","SUSE-SU-2025:03540-1","SUSE-SU-2025:03545-1","SUSE-SU-2025:0770-1","SUSE-SU-2025:0852-1","SUSE-SU-2025:0872-1","SUSE-SU-2025:0881-1","SUSE-SU-2025:0882-1","SUSE-SU-2025:1005-1","SUSE-SU-2025:1006-1","SUSE-SU-2025:1062-1","SUSE-SU-2025:1102-1","SUSE-SU-2025:1332-1","SUSE-SU-2025:1333-1","SUSE-SU-2025:20205-1","SUSE-SU-2025:20360-1","SUSE-SU-2025:20377-1","SUSE-SU-2025:20393-1","SUSE-SU-2025:20515-1","SUSE-SU-2026:0592-1","SUSE-SU-2026:0972-1","SUSE-SU-2026:1118-1","SUSE-SU-2026:20550-1","SUSE-SU-2026:21989-1","SUSE-SU-2026:22128-1","SUSE-SU-2026:22133-1","SUSE-SU-2026:22242-1","SUSE-SU-2026:22249-1","SUSE-SU-2026:22558-1","SUSE-SU-2026:2581-1","SUSE-SU-2026:2612-1","UBUNTU-CVE-2025-22868","openSUSE-SU-2025:0091-1","openSUSE-SU-2025:0103-1","openSUSE-SU-2025:14839-1","openSUSE-SU-2025:14843-1","openSUSE-SU-2025:14868-1","openSUSE-SU-2025:14869-1","openSUSE-SU-2025:14870-1","openSUSE-SU-2025:14874-1","openSUSE-SU-2025:14904-1","openSUSE-SU-2025:14905-1","openSUSE-SU-2025:14923-1","openSUSE-SU-2025:14985-1","openSUSE-SU-2025:14988-1","openSUSE-SU-2025:14990-1","openSUSE-SU-2025:15184-1","openSUSE-SU-2025:15304-1","openSUSE-SU-2025:15305-1","openSUSE-SU-2025:15454-1","openSUSE-SU-2025:20117-1","openSUSE-SU-2026:10230-1","openSUSE-SU-2026:11126-1","openSUSE-SU-2026:20279-1","openSUSE-SU-2026:20798-1","openSUSE-SU-2026:20969-1","openSUSE-SU-2026:21210-1","openSUSE-SU-2026:21265-1","openSUSE-SU-2026:21481-1","openSUSE-SU-2026:22227-1"],"status":"published","title":"Unexpected memory consumption during token parsing in golang.org/x/oauth2","description":"An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-11","score":0.0087,"percentile":0.59227,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-1286"],"published":"2025-02-26T00:00:00Z","modified":"2026-11-11T01:00:36Z","fixes":[{"ecosystem":"Go","package":"github.com/traefik/traefik/v3","fixed_in":["3.3.6","3.4.0-rc2"],"sources":["ghsa","osv"]},{"ecosystem":"Go","package":"github.com/traefik/traefik/v2","fixed_in":["2.11.24"],"sources":["ghsa","osv"]},{"ecosystem":"Go","package":"golang.org/x/oauth2","fixed_in":["0.27.0"],"sources":["ghsa","osv"]},{"ecosystem":"Azure Linux:3","package":"kubernetes","fixed_in":["1.30.10-3"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"azcopy","fixed_in":["10.25.1-2"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"cert-manager","fixed_in":["1.12.15-2"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"node-problem-detector","fixed_in":["0.8.20-2"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"vitess","fixed_in":["19.0.4-5"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"prometheus","fixed_in":["2.45.4-10"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"influxdb","fixed_in":["2.7.5-2"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"packer","fixed_in":["1.9.5-6"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"keda","fixed_in":["2.14.1-3"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"containerized-data-importer","fixed_in":["1.57.0-13"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"moby-engine","fixed_in":["25.0.3-11"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"coredns","fixed_in":["1.11.4-3"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"telegraf","fixed_in":["1.31.0-7"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"cert-manager","fixed_in":["1.11.2-20"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"node-problem-detector","fixed_in":["0.8.17-6"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"packer","fixed_in":["1.9.5-10"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"vitess","fixed_in":["17.0.7-5"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"azcopy","fixed_in":["10.25.1-5"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"moby-engine","fixed_in":["24.0.9-15"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"blobfuse2","fixed_in":["2.1.2-8"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"coredns","fixed_in":["1.11.1-14"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"kubernetes","fixed_in":["1.28.4-15"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"telegraf","fixed_in":["1.29.4-13"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"golang-golang-x-oauth2","fixed_in":["0.27.0-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"golang-golang-x-oauth2","fixed_in":["0.27.0-1"],"sources":["osv"]},{"ecosystem":"Root:Go","package":"golang.org/x/oauth2","fixed_in":["v0.23.0-aikido.3","v0.21.0-aikido.1","v0.26.0-aikido.1","v0.24.0-aikido.1","v0.17.0-aikido.1","v0.18.0-aikido.1"],"sources":["osv"]},{"ecosystem":"Root:Go","package":"rootio-golang.org/x/oauth2","fixed_in":["v0.23.0-root.io.1","v0.23.0-root.io.3","v0.21.0-root.io.1","v0.26.0-root.io.1","v0.24.0-root.io.1","v0.17.0-root.io.1","v0.18.0-root.io.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"ignition","fixed_in":["2.14.0-150300.4.13.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"ignition","fixed_in":["2.14.0-150300.6.13.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"ignition","fixed_in":["2.15.0-150400.4.11.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"ignition","fixed_in":["2.14.0-150400.4.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"ignition","fixed_in":["2.17.0-150500.3.12.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 12","package":"google-osconfig-agent","fixed_in":["20250115.01-1.38.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 12","package":"google-guest-agent","fixed_in":["20250116.00-1.47.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 12","package":"google-cloud-sap-agent","fixed_in":["3.6-6.43.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP3","package":"google-cloud-sap-agent","fixed_in":["3.6-150100.3.44.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP4","package":"google-cloud-sap-agent","fixed_in":["3.6-150100.3.44.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP5","package":"google-cloud-sap-agent","fixed_in":["3.6-150100.3.44.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP6","package":"google-cloud-sap-agent","fixed_in":["3.6-150100.3.44.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"google-cloud-sap-agent","fixed_in":["3.6-150100.3.44.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"google-guest-agent","fixed_in":["20250116.00-150000.1.57.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP3","package":"google-guest-agent","fixed_in":["20250116.00-150000.1.57.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP4","package":"google-guest-agent","fixed_in":["20250116.00-150000.1.57.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP5","package":"google-guest-agent","fixed_in":["20250116.00-150000.1.57.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP6","package":"google-guest-agent","fixed_in":["20250116.00-150000.1.57.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"google-guest-agent","fixed_in":["20250116.00-150000.1.57.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"google-osconfig-agent","fixed_in":["20250115.01-150000.1.47.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP3","package":"google-osconfig-agent","fixed_in":["20250115.01-150000.1.47.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP4","package":"google-osconfig-agent","fixed_in":["20250115.01-150000.1.47.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP5","package":"google-osconfig-agent","fixed_in":["20250115.01-150000.1.47.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP6","package":"google-osconfig-agent","fixed_in":["20250115.01-150000.1.47.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"google-osconfig-agent","fixed_in":["20250115.01-150000.1.47.1"],"sources":["osv"]},{"ecosystem":"SUSE:Package Hub 15 SP6","package":"restic","fixed_in":["0.17.3-bp156.2.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"restic","fixed_in":["0.17.3-bp156.2.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"fake-gcs-server","fixed_in":["1.52.2-1.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"google-guest-agent","fixed_in":["20250116.00-3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"google-osconfig-agent","fixed_in":["20250115.01-3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"restic","fixed_in":["0.17.3-2.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"cadvisor","fixed_in":["0.52.1-1.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"go-containerregistry","fixed_in":["0.20.3-2.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"pluto","fixed_in":["5.21.7-1.1"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"Go","package":"github.com/traefik/traefik/v3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.6"}]}]},{"source":"ghsa","ecosystem":"Go","package":"github.com/traefik/traefik/v2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.24"}]}]},{"source":"ghsa","ecosystem":"Go","package":"github.com/traefik/traefik/v3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.4.0-rc1"},{"last_affected":"3.4.0-rc1"},{"fixed":"3.4.0-rc2"}]}],"versions":["3.4.0-rc1"]},{"source":"ghsa","ecosystem":"Go","package":"golang.org/x/oauth2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.27.0"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"kubernetes","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.30.10-3"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"azcopy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.25.1-2"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"cert-manager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.15-2"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"node-problem-detector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.20-2"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"vitess","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.0.4-5"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"prometheus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.45.4-10"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"influxdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.5-2"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"packer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.5-6"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"keda","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.14.1-3"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"containerized-data-importer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.57.0-13"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"moby-engine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.3-11"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"coredns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.4-3"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"telegraf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.31.0-7"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"cert-manager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.2-20"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"node-problem-detector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.17-6"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"packer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.5-10"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"vitess","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.7-5"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"azcopy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.25.1-5"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"moby-engine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9-15"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"blobfuse2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.2-8"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"coredns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.1-14"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"kubernetes","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.28.4-15"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"telegraf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.29.4-13"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"golang-golang-x-oauth2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.13.0-1","0.15.0-1","0.15.0-1~bpo12+1","0.26.0-1","0.27.0-1","0.3.0-1","0.30.0-1","0.32.0-1","0.34.0-1","0.36.0-1","0.36.0-2","0.36.0-3","0.4.0-1"]},{"source":"osv","ecosystem":"Debian:13","package":"golang-golang-x-oauth2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.27.0-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"golang-golang-x-oauth2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.27.0-1"}]}]},{"source":"osv","ecosystem":"Go","package":"github.com/traefik/traefik/v3","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"3.3.6"}]}]},{"source":"osv","ecosystem":"Go","package":"github.com/traefik/traefik/v2","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"2.11.24"}]}]},{"source":"osv","ecosystem":"Go","package":"github.com/traefik/traefik/v3","ranges":[{"type":"SEMVER","events":[{"introduced":"3.4.0-rc1"},{"fixed":"3.4.0-rc2"}]}],"versions":["3.4.0-rc1"]},{"source":"osv","ecosystem":"Go","package":"golang.org/x/oauth2","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"0.27.0"}]}]},{"source":"osv","ecosystem":"Go","package":"golang.org/x/oauth2","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"0.27.0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"opentelemetry-collector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.107.0-8.el9_5"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"opentelemetry-collector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.107.0-7.el9_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"opentelemetry-collector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.107.0-8.el9_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"opentelemetry-collector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.107.0-9.el10_0"}]}],"bundled":4},{"source":"osv","ecosystem":"Rocky Linux:10","package":"opentelemetry-collector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.107.0-9.el10_0"}]}],"bundled":4},{"source":"osv","ecosystem":"Root:Go","package":"golang.org/x/oauth2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"v0.23.0-aikido.3"},{"fixed":"v0.21.0-aikido.1"},{"fixed":"v0.26.0-aikido.1"},{"fixed":"v0.24.0-aikido.1"},{"fixed":"v0.17.0-aikido.1"},{"fixed":"v0.18.0-aikido.1"}]}]},{"source":"osv","ecosystem":"Root:Go","package":"rootio-golang.org/x/oauth2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"v0.23.0-root.io.1"},{"fixed":"v0.23.0-root.io.3"},{"fixed":"v0.21.0-root.io.1"},{"fixed":"v0.26.0-root.io.1"},{"fixed":"v0.24.0-root.io.1"},{"fixed":"v0.17.0-root.io.1"},{"fixed":"v0.18.0-root.io.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for HPC 15 SP6","package":"ignition","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.14.0-150400.9.9.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for HPC 15 SP7","package":"ignition","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.14.0-150400.9.9.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"ignition","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.14.0-150400.9.9.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"ignition","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.14.0-150300.4.13.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"ignition","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.14.0-150300.6.13.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"ignition","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.15.0-150400.4.11.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"ignition","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.14.0-150400.4.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"ignition","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.17.0-150500.3.12.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-1.20.1"}]}],"bundled":53},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-1.20.1"}]}],"bundled":53},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Containers 15 SP6","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-150000.1.25.1"}]}],"bundled":53},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Containers 15 SP7","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-150000.1.25.1"}]}],"bundled":53},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-150000.1.25.1"}]}],"bundled":53},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-150000.1.25.1"}]}],"bundled":53},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-150000.1.25.1"}]}],"bundled":53},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-150000.1.25.1"}]}],"bundled":53},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-150000.1.25.1"}]}],"bundled":53},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-150000.1.25.1"}]}],"bundled":53},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-150000.1.25.1"}]}],"bundled":53},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-150000.1.25.1"}]}],"bundled":53},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-150000.1.25.1"}]}],"bundled":53},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-150000.1.25.1"}]}],"bundled":53},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-150000.1.25.1"}]}],"bundled":53},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-150000.1.25.1"}]}],"bundled":53},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-150000.1.25.1"}]}],"bundled":53},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP6","package":"govulncheck-vulndb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.20250226T025151-150000.1.35.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"govulncheck-vulndb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.20250226T025151-150000.1.35.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 12","package":"google-osconfig-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20250115.01-1.38.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 12","package":"google-guest-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20250116.00-1.47.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 12","package":"google-cloud-sap-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6-6.43.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP3","package":"google-cloud-sap-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6-150100.3.44.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP4","package":"google-cloud-sap-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6-150100.3.44.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP5","package":"google-cloud-sap-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6-150100.3.44.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP6","package":"google-cloud-sap-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6-150100.3.44.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"google-cloud-sap-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6-150100.3.44.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"google-guest-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20250116.00-150000.1.57.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP3","package":"google-guest-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20250116.00-150000.1.57.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP4","package":"google-guest-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20250116.00-150000.1.57.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP5","package":"google-guest-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20250116.00-150000.1.57.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP6","package":"google-guest-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20250116.00-150000.1.57.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"google-guest-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20250116.00-150000.1.57.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"google-osconfig-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20250115.01-150000.1.47.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP3","package":"google-osconfig-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20250115.01-150000.1.47.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP4","package":"google-osconfig-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20250115.01-150000.1.47.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP5","package":"google-osconfig-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20250115.01-150000.1.47.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP6","package":"google-osconfig-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20250115.01-150000.1.47.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"google-osconfig-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20250115.01-150000.1.47.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"27.5.1_ce-150000.218.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"27.5.1_ce-150000.218.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"27.5.1_ce-150000.218.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Containers 15 SP6","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"27.5.1_ce-150000.218.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Containers 15 SP6","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-150000.1.15.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"27.5.1_ce-150000.218.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-150000.1.15.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"27.5.1_ce-150000.218.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-150000.1.15.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"27.5.1_ce-150000.218.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-150000.1.15.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"27.5.1_ce-150000.218.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-150000.1.15.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"27.5.1_ce-150000.218.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-150000.1.15.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"27.5.1_ce-150000.218.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-150000.1.15.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"27.5.1_ce-150000.218.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-150000.1.15.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"27.5.1_ce-150000.218.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-150000.1.15.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"27.5.1_ce-150000.218.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-150000.1.15.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"27.5.1_ce-150000.218.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-150000.1.15.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"27.5.1_ce-150000.218.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-150000.1.15.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"27.5.1_ce-150000.218.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"27.5.1_ce-150000.218.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"27.5.1_ce-150000.218.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-150000.1.15.1"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"27.5.1_ce-150000.218.1"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-150000.1.15.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"27.5.1_ce-98.126.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-1.11.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"27.5.1_ce-98.126.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-1.11.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"rekor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.10-150400.4.25.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"rekor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.10-150400.4.25.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"rekor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.10-150400.4.25.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"rekor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.10-150400.4.25.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"rekor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.10-150400.4.25.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"rekor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.10-150400.4.25.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"rekor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.10-150400.4.25.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"rekor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.10-150400.4.25.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"rekor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.10-150400.4.25.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.3","package":"rekor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.10-150400.4.25.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Manager Server 4.3","package":"rekor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.10-150400.4.25.1"}]}],"bundled":6},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"rekor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.10-150400.4.25.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"cosign","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.0-150400.3.27.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"cosign","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.0-150400.3.27.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"cosign","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.0-150400.3.27.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"cosign","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.0-150400.3.27.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"cosign","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.0-150400.3.27.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"cosign","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.0-150400.3.27.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"cosign","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.0-150400.3.27.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"cosign","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.0-150400.3.27.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"cosign","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.0-150400.3.27.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.3","package":"cosign","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.0-150400.3.27.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Manager Server 4.3","package":"cosign","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.0-150400.3.27.1"}]}],"bundled":6},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"cosign","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.0-150400.3.27.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"27.5.1_ce-2.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"27.5.1_ce-slfo.1.1_2.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"27.5.1_ce-3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"27.5.1_ce-slfo.1.1_3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"ignition","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.0-2.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"vexctl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.1+git78.f951e3a-150000.1.11.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Containers 15 SP7","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-150000.1.39.1"}]}],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-150000.1.39.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-1.32.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"google-guest-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20260430.00-160000.1.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"google-guest-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20260430.00-160000.1.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"google-guest-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20260430.00-slfo.1.1_1.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"google-osconfig-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20260615.01-1.1"}]}],"bundled":23},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"google-osconfig-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20260615.01-slfo.1.1_1.1"}]}],"bundled":22},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"google-osconfig-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20260615.01-160000.1.2"}]}],"bundled":22},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"google-osconfig-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20260615.01-160000.1.2"}]}],"bundled":22},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 12","package":"google-guest-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20260529.00-1.61.1"}]}],"bundled":22},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"google-guest-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20260529.00-150000.1.70.1"}]}],"bundled":22},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP4","package":"google-guest-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20260529.00-150000.1.70.1"}]}],"bundled":22},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP5","package":"google-guest-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20260529.00-150000.1.70.1"}]}],"bundled":22},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP6","package":"google-guest-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20260529.00-150000.1.70.1"}]}],"bundled":22},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP7","package":"google-guest-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20260529.00-150000.1.70.1"}]}],"bundled":22},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"golang-golang-x-oauth2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.0~git20150527-2","0.0~git20151116.0.442624c-1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"golang-golang-x-oauth2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.0~git20161103.0.36bc617-4","0.0~git20170901.d89af98-1","0.0~git20180207.543e378-1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"golang-golang-x-oauth2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.0~git20190604.0f29369-2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"golang-golang-x-oauth2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.0~git20190604.0f29369-2","0.0~git20211104.d3ed0bb-1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"golang-golang-x-oauth2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.4.0-1","0.15.0-1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"golang-golang-x-oauth2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.27.0-1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"golang-golang-x-oauth2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.27.0-1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"golang-golang-x-oauth2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.27.0-1"]},{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP6","package":"restic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.17.3-bp156.2.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"restic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.17.3-bp156.2.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP6","package":"cadvisor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.52.1-bp156.3.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"cadvisor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.52.1-bp156.3.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"teleport","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.2.9-1.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"govulncheck-vulndb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.20250226T025151-1.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"fake-gcs-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.52.2-1.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"google-guest-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20250116.00-3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"google-osconfig-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20250115.01-3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"restic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.17.3-2.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"cadvisor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.52.1-1.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"go-containerregistry","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.20.3-2.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"docker-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.0.9_ce-8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"27.5.1_ce-15.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"cosign","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.0-1.1"}]}],"bundled":6},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"rekor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.10-1.1"}]}],"bundled":6},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"pluto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.21.7-1.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"traefik","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.3-1.1"}]}],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"traefik2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.26-1.1"}]}],"bundled":9},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"trivy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.65.0-1.1"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"vexctl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.1+git78.f951e3a-1.1"}]}],"bundled":9},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"velociraptor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.0.4.git185.a5708584-2.1"}]}],"bundled":49},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"google-guest-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20260430.00-160000.1.1"}]}],"bundled":6},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"google-osconfig-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20260615.01-160000.1.2"}]}],"bundled":22},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"cadvisor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.60.3-bp160.1.1"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"vexctl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.4+git20.5d61136-160000.1.1"}]}],"bundled":9},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"go-containerregistry","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.22.1-bp160.1.1"}]}],"bundled":3}],"products":[{"vendor":"go","product":"jws"},{"vendor":"golang.org/x/oauth2","product":"golang.org/x/oauth2/jws"}],"references":[{"url":"https://go.dev/cl/652155","tags":["Patch","fix","web","article","report"]},{"url":"https://go.dev/issue/71490","tags":["Issue Tracking","Patch","fix","web","report","article"]},{"url":"https://pkg.go.dev/vuln/GO-2025-3488","tags":["Third Party Advisory","advisory","web","report"]},{"url":"https://github.com/traefik/traefik/security/advisories/GHSA-3wqc-mwfx-672p","tags":["web"]},{"url":"https://github.com/traefik/traefik/releases/tag/v2.11.24","tags":["web"]},{"url":"https://github.com/traefik/traefik/releases/tag/v3.3.6","tags":["web"]},{"url":"https://github.com/traefik/traefik/releases/tag/v3.4.0-rc2","tags":["web"]},{"url":"https://security.snyk.io/vuln/SNYK-CHAINGUARDLATEST-TRAEFIK33-9403297","tags":["web"]},{"url":"https://github.com/advisories/GHSA-3wqc-mwfx-672p"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-22868","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-6v2p-p543-phr9"},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-22868","tags":["advisory"]},{"url":"https://github.com/traefik/traefik","tags":["package"]},{"url":"https://access.redhat.com/errata/RHSA-2025:3335","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2341751","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2347423","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2348366","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2352914","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_3335.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-45336","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-45336","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-45336","tags":["advisory"]},{"url":"https://github.com/golang/go/issues/70530","tags":["article"]},{"url":"https://groups.google.com/g/golang-announce/c/sSaUhLA-2SI","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-22868","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-22868","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-27144","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-27144","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-27144","tags":["advisory"]},{"url":"https://github.com/go-jose/go-jose/commit/99b346cec4e86d102284642c5dcbe9bb0cacfc22","tags":["article"]},{"url":"https://github.com/go-jose/go-jose/releases/tag/v4.0.5","tags":["article"]},{"url":"https://github.com/go-jose/go-jose/security/advisories/GHSA-c6gw-w398-hv78","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-29786","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-29786","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-29786","tags":["advisory"]},{"url":"https://github.com/expr-lang/expr/pull/762","tags":["article"]},{"url":"https://github.com/expr-lang/expr/security/advisories/GHSA-93mq-9ffx-83m2","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2025:3593","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_3593.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:7407","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2354195","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_7407.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-30204","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-30204","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-30204","tags":["advisory"]},{"url":"https://github.com/golang-jwt/jwt/commit/0951d184286dece21f73c85673fd308786ffe9c3","tags":["article"]},{"url":"https://github.com/golang-jwt/jwt/security/advisories/GHSA-mh63-6h87-95cp","tags":["article"]},{"url":"https://pkg.go.dev/vuln/GO-2025-3553","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:7479","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_7479.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2025:7479","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502014-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1238681","tags":["report"]},{"url":"https://bugzilla.suse.com/1239192","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-22868","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-22870","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502035-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502040-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502041-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502046-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502097-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202503540-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1001161","tags":["report"]},{"url":"https://bugzilla.suse.com/1004490","tags":["report"]},{"url":"https://bugzilla.suse.com/1007249","tags":["report"]},{"url":"https://bugzilla.suse.com/1009961","tags":["report"]},{"url":"https://bugzilla.suse.com/1012568","tags":["report"]},{"url":"https://bugzilla.suse.com/1015661","tags":["report"]},{"url":"https://bugzilla.suse.com/1016307","tags":["report"]},{"url":"https://bugzilla.suse.com/1016992","tags":["report"]},{"url":"https://bugzilla.suse.com/1019251","tags":["report"]},{"url":"https://bugzilla.suse.com/1020806","tags":["report"]},{"url":"https://bugzilla.suse.com/1021227","tags":["report"]},{"url":"https://bugzilla.suse.com/1026827","tags":["report"]},{"url":"https://bugzilla.suse.com/1028638","tags":["report"]},{"url":"https://bugzilla.suse.com/1028639","tags":["report"]},{"url":"https://bugzilla.suse.com/1029320","tags":["report"]},{"url":"https://bugzilla.suse.com/1029630","tags":["report"]},{"url":"https://bugzilla.suse.com/1030702","tags":["report"]},{"url":"https://bugzilla.suse.com/1032287","tags":["report"]},{"url":"https://bugzilla.suse.com/1032644","tags":["report"]},{"url":"https://bugzilla.suse.com/1034053","tags":["report"]},{"url":"https://bugzilla.suse.com/1034063","tags":["report"]},{"url":"https://bugzilla.suse.com/1037436","tags":["report"]},{"url":"https://bugzilla.suse.com/1037607","tags":["report"]},{"url":"https://bugzilla.suse.com/1038476","tags":["report"]},{"url":"https://bugzilla.suse.com/1038493","tags":["report"]},{"url":"https://bugzilla.suse.com/1045628","tags":["report"]},{"url":"https://bugzilla.suse.com/1046024","tags":["report"]},{"url":"https://bugzilla.suse.com/1047218","tags":["report"]},{"url":"https://bugzilla.suse.com/1048046","tags":["report"]},{"url":"https://bugzilla.suse.com/1051429","tags":["report"]},{"url":"https://bugzilla.suse.com/1055676","tags":["report"]},{"url":"https://bugzilla.suse.com/1057743","tags":["report"]},{"url":"https://bugzilla.suse.com/1058173","tags":["report"]},{"url":"https://bugzilla.suse.com/1059011","tags":["report"]},{"url":"https://bugzilla.suse.com/1064781","tags":["report"]},{"url":"https://bugzilla.suse.com/1065609","tags":["report"]},{"url":"https://bugzilla.suse.com/1066210","tags":["report"]},{"url":"https://bugzilla.suse.com/1066801","tags":["report"]},{"url":"https://bugzilla.suse.com/1069468","tags":["report"]},{"url":"https://bugzilla.suse.com/1069758","tags":["report"]},{"url":"https://bugzilla.suse.com/1072798","tags":["report"]},{"url":"https://bugzilla.suse.com/1073877","tags":["report"]},{"url":"https://bugzilla.suse.com/1074971","tags":["report"]},{"url":"https://bugzilla.suse.com/1080978","tags":["report"]},{"url":"https://bugzilla.suse.com/1084533","tags":["report"]},{"url":"https://bugzilla.suse.com/1085117","tags":["report"]},{"url":"https://bugzilla.suse.com/1085380","tags":["report"]},{"url":"https://bugzilla.suse.com/1086185","tags":["report"]},{"url":"https://bugzilla.suse.com/1089732","tags":["report"]},{"url":"https://bugzilla.suse.com/1095817","tags":["report"]},{"url":"https://bugzilla.suse.com/1096726","tags":["report"]},{"url":"https://bugzilla.suse.com/1099277","tags":["report"]},{"url":"https://bugzilla.suse.com/1100331","tags":["report"]},{"url":"https://bugzilla.suse.com/1100727","tags":["report"]},{"url":"https://bugzilla.suse.com/1102522","tags":["report"]},{"url":"https://bugzilla.suse.com/1104821","tags":["report"]},{"url":"https://bugzilla.suse.com/1105000","tags":["report"]},{"url":"https://bugzilla.suse.com/1108038","tags":["report"]},{"url":"https://bugzilla.suse.com/1112980","tags":["report"]},{"url":"https://bugzilla.suse.com/1113313","tags":["report"]},{"url":"https://bugzilla.suse.com/1114832","tags":["report"]},{"url":"https://bugzilla.suse.com/1115464","tags":["report"]},{"url":"https://bugzilla.suse.com/1118897","tags":["report"]},{"url":"https://bugzilla.suse.com/1118898","tags":["report"]},{"url":"https://bugzilla.suse.com/1118899","tags":["report"]},{"url":"https://bugzilla.suse.com/1118990","tags":["report"]},{"url":"https://bugzilla.suse.com/1119634","tags":["report"]},{"url":"https://bugzilla.suse.com/1121412","tags":["report"]},{"url":"https://bugzilla.suse.com/1121768","tags":["report"]},{"url":"https://bugzilla.suse.com/1122469","tags":["report"]},{"url":"https://bugzilla.suse.com/1124308","tags":["report"]},{"url":"https://bugzilla.suse.com/1128376","tags":["report"]},{"url":"https://bugzilla.suse.com/1128746","tags":["report"]},{"url":"https://bugzilla.suse.com/1134068","tags":["report"]},{"url":"https://bugzilla.suse.com/1138920","tags":["report"]},{"url":"https://bugzilla.suse.com/1139649","tags":["report"]},{"url":"https://bugzilla.suse.com/1142160","tags":["report"]},{"url":"https://bugzilla.suse.com/1142413","tags":["report"]},{"url":"https://bugzilla.suse.com/1143349","tags":["report"]},{"url":"https://bugzilla.suse.com/1150397","tags":["report"]},{"url":"https://bugzilla.suse.com/1153367","tags":["report"]},{"url":"https://bugzilla.suse.com/1157330","tags":["report"]},{"url":"https://bugzilla.suse.com/1158590","tags":["report"]},{"url":"https://bugzilla.suse.com/1170415","tags":["report"]},{"url":"https://bugzilla.suse.com/1170446","tags":["report"]},{"url":"https://bugzilla.suse.com/1172377","tags":["report"]},{"url":"https://bugzilla.suse.com/1174075","tags":["report"]},{"url":"https://bugzilla.suse.com/1175081","tags":["report"]},{"url":"https://bugzilla.suse.com/1176708","tags":["report"]},{"url":"https://bugzilla.suse.com/1178760","tags":["report"]},{"url":"https://bugzilla.suse.com/1178801","tags":["report"]},{"url":"https://bugzilla.suse.com/1180243","tags":["report"]},{"url":"https://bugzilla.suse.com/1180401","tags":["report"]},{"url":"https://bugzilla.suse.com/1181594","tags":["report"]},{"url":"https://bugzilla.suse.com/1181641","tags":["report"]},{"url":"https://bugzilla.suse.com/1181677","tags":["report"]},{"url":"https://bugzilla.suse.com/1181730","tags":["report"]},{"url":"https://bugzilla.suse.com/1181732","tags":["report"]},{"url":"https://bugzilla.suse.com/1182168","tags":["report"]},{"url":"https://bugzilla.suse.com/1182476","tags":["report"]},{"url":"https://bugzilla.suse.com/1182947","tags":["report"]},{"url":"https://bugzilla.suse.com/1183855","tags":["report"]},{"url":"https://bugzilla.suse.com/1184768","tags":["report"]},{"url":"https://bugzilla.suse.com/1188447","tags":["report"]},{"url":"https://bugzilla.suse.com/1190670","tags":["report"]},{"url":"https://bugzilla.suse.com/1191015","tags":["report"]},{"url":"https://bugzilla.suse.com/1191121","tags":["report"]},{"url":"https://bugzilla.suse.com/1191334","tags":["report"]},{"url":"https://bugzilla.suse.com/1191355","tags":["report"]},{"url":"https://bugzilla.suse.com/1191434","tags":["report"]},{"url":"https://bugzilla.suse.com/1192814","tags":["report"]},{"url":"https://bugzilla.suse.com/1193273","tags":["report"]},{"url":"https://bugzilla.suse.com/1193930","tags":["report"]},{"url":"https://bugzilla.suse.com/1197284","tags":["report"]},{"url":"https://bugzilla.suse.com/1197517","tags":["report"]},{"url":"https://bugzilla.suse.com/1200022","tags":["report"]},{"url":"https://bugzilla.suse.com/1200145","tags":["report"]},{"url":"https://bugzilla.suse.com/1205375","tags":["report"]},{"url":"https://bugzilla.suse.com/1206065","tags":["report"]},{"url":"https://bugzilla.suse.com/1208074","tags":["report"]},{"url":"https://bugzilla.suse.com/1210141","tags":["report"]},{"url":"https://bugzilla.suse.com/1210797","tags":["report"]},{"url":"https://bugzilla.suse.com/1211578","tags":["report"]},{"url":"https://bugzilla.suse.com/1212368","tags":["report"]},{"url":"https://bugzilla.suse.com/1213120","tags":["report"]},{"url":"https://bugzilla.suse.com/1213229","tags":["report"]},{"url":"https://bugzilla.suse.com/1213500","tags":["report"]},{"url":"https://bugzilla.suse.com/1214107","tags":["report"]},{"url":"https://bugzilla.suse.com/1214108","tags":["report"]},{"url":"https://bugzilla.suse.com/1214109","tags":["report"]},{"url":"https://bugzilla.suse.com/1215323","tags":["report"]},{"url":"https://bugzilla.suse.com/1217513","tags":["report"]},{"url":"https://bugzilla.suse.com/1219267","tags":["report"]},{"url":"https://bugzilla.suse.com/1219268","tags":["report"]},{"url":"https://bugzilla.suse.com/1219438","tags":["report"]},{"url":"https://bugzilla.suse.com/1240150","tags":["report"]},{"url":"https://bugzilla.suse.com/1247362","tags":["report"]},{"url":"https://bugzilla.suse.com/1250508","tags":["report"]},{"url":"https://bugzilla.suse.com/1250596","tags":["report"]},{"url":"https://bugzilla.suse.com/885209","tags":["report"]},{"url":"https://bugzilla.suse.com/907012","tags":["report"]},{"url":"https://bugzilla.suse.com/907014","tags":["report"]},{"url":"https://bugzilla.suse.com/908033","tags":["report"]},{"url":"https://bugzilla.suse.com/909709","tags":["report"]},{"url":"https://bugzilla.suse.com/909710","tags":["report"]},{"url":"https://bugzilla.suse.com/909712","tags":["report"]},{"url":"https://bugzilla.suse.com/913211","tags":["report"]},{"url":"https://bugzilla.suse.com/913213","tags":["report"]},{"url":"https://bugzilla.suse.com/920645","tags":["report"]},{"url":"https://bugzilla.suse.com/930235","tags":["report"]},{"url":"https://bugzilla.suse.com/931301","tags":["report"]},{"url":"https://bugzilla.suse.com/935570","tags":["report"]},{"url":"https://bugzilla.suse.com/938156","tags":["report"]},{"url":"https://bugzilla.suse.com/942369","tags":["report"]},{"url":"https://bugzilla.suse.com/942370","tags":["report"]},{"url":"https://bugzilla.suse.com/946653","tags":["report"]},{"url":"https://bugzilla.suse.com/949660","tags":["report"]},{"url":"https://bugzilla.suse.com/950931","tags":["report"]},{"url":"https://bugzilla.suse.com/953182","tags":["report"]},{"url":"https://bugzilla.suse.com/954737","tags":["report"]},{"url":"https://bugzilla.suse.com/954797","tags":["report"]},{"url":"https://bugzilla.suse.com/954812","tags":["report"]},{"url":"https://bugzilla.suse.com/956434","tags":["report"]},{"url":"https://bugzilla.suse.com/958255","tags":["report"]},{"url":"https://bugzilla.suse.com/959405","tags":["report"]},{"url":"https://bugzilla.suse.com/963142","tags":["report"]},{"url":"https://bugzilla.suse.com/964468","tags":["report"]},{"url":"https://bugzilla.suse.com/964673","tags":["report"]},{"url":"https://bugzilla.suse.com/965600","tags":["report"]},{"url":"https://bugzilla.suse.com/965918","tags":["report"]},{"url":"https://bugzilla.suse.com/968933","tags":["report"]},{"url":"https://bugzilla.suse.com/968972","tags":["report"]},{"url":"https://bugzilla.suse.com/970637","tags":["report"]},{"url":"https://bugzilla.suse.com/974208","tags":["report"]},{"url":"https://bugzilla.suse.com/976777","tags":["report"]},{"url":"https://bugzilla.suse.com/977394","tags":["report"]},{"url":"https://bugzilla.suse.com/978260","tags":["report"]},{"url":"https://bugzilla.suse.com/980555","tags":["report"]},{"url":"https://bugzilla.suse.com/983015","tags":["report"]},{"url":"https://bugzilla.suse.com/984942","tags":["report"]},{"url":"https://bugzilla.suse.com/987198","tags":["report"]},{"url":"https://bugzilla.suse.com/988408","tags":["report"]},{"url":"https://bugzilla.suse.com/988707","tags":["report"]},{"url":"https://bugzilla.suse.com/989566","tags":["report"]},{"url":"https://bugzilla.suse.com/993847","tags":["report"]},{"url":"https://bugzilla.suse.com/995058","tags":["report"]},{"url":"https://bugzilla.suse.com/995102","tags":["report"]},{"url":"https://bugzilla.suse.com/995620","tags":["report"]},{"url":"https://bugzilla.suse.com/996015","tags":["report"]},{"url":"https://bugzilla.suse.com/999582","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3499","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-5277","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6407","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6408","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8178","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8179","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9356","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9357","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9358","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3627","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3629","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3630","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3631","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3697","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-8867","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9962","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14992","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-16539","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-10892","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-15664","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16873","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16874","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16875","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-20699","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13509","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-14271","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12912","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-13401","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15257","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-8694","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-8695","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-21284","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-21285","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-41089","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-41091","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-41092","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-41103","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-41190","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-43565","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-24769","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-27191","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-36109","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-28840","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-28841","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-28842","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-23650","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-23651","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-23652","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-23653","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-29018","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-41110","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-22869","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202503545-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20250770-1/","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2024-45337","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20250852-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1239197","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20250872-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20250881-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20250882-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20251005-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20251006-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20251062-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1237367","tags":["report"]},{"url":"https://bugzilla.suse.com/1239185","tags":["report"]},{"url":"https://bugzilla.suse.com/1239322","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20251102-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1219437","tags":["report"]},{"url":"https://bugzilla.suse.com/1234089","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20251332-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1227053","tags":["report"]},{"url":"https://bugzilla.suse.com/1236519","tags":["report"]},{"url":"https://bugzilla.suse.com/1237638","tags":["report"]},{"url":"https://bugzilla.suse.com/1239191","tags":["report"]},{"url":"https://bugzilla.suse.com/1239327","tags":["report"]},{"url":"https://bugzilla.suse.com/1240468","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-45288","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-6104","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-27144","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-30204","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20251333-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1227031","tags":["report"]},{"url":"https://bugzilla.suse.com/1232985","tags":["report"]},{"url":"https://bugzilla.suse.com/1237682","tags":["report"]},{"url":"https://bugzilla.suse.com/1238693","tags":["report"]},{"url":"https://bugzilla.suse.com/1239204","tags":["report"]},{"url":"https://bugzilla.suse.com/1239337","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-51744","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520205-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1223409","tags":["report"]},{"url":"https://bugzilla.suse.com/1237335","tags":["report"]},{"url":"https://bugzilla.suse.com/1239765","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-0495","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520360-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520377-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1244035","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520393-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520515-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20260592-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1234486","tags":["report"]},{"url":"https://bugzilla.suse.com/1237611","tags":["report"]},{"url":"https://bugzilla.suse.com/1238683","tags":["report"]},{"url":"https://bugzilla.suse.com/1239186","tags":["report"]},{"url":"https://bugzilla.suse.com/1239323","tags":["report"]},{"url":"https://bugzilla.suse.com/1240444","tags":["report"]},{"url":"https://bugzilla.suse.com/1253802","tags":["report"]},{"url":"https://bugzilla.suse.com/1256535","tags":["report"]},{"url":"https://bugzilla.suse.com/1257138","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-58181","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-22772","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24137","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20260972-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1253904","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20261118-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202620550-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1235204","tags":["report"]},{"url":"https://bugzilla.suse.com/1235365","tags":["report"]},{"url":"https://bugzilla.suse.com/1239205","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-28180","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-45338","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202621989-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1210938","tags":["report"]},{"url":"https://bugzilla.suse.com/1239334","tags":["report"]},{"url":"https://bugzilla.suse.com/1239944","tags":["report"]},{"url":"https://bugzilla.suse.com/1243254","tags":["report"]},{"url":"https://bugzilla.suse.com/1243505","tags":["report"]},{"url":"https://bugzilla.suse.com/1245759","tags":["report"]},{"url":"https://bugzilla.suse.com/1253889","tags":["report"]},{"url":"https://bugzilla.suse.com/1257010","tags":["report"]},{"url":"https://bugzilla.suse.com/1260264","tags":["report"]},{"url":"https://bugzilla.suse.com/1262926","tags":["report"]},{"url":"https://bugzilla.suse.com/1265762","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33186","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33814","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34986","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202622128-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202622133-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202622242-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1236533","tags":["report"]},{"url":"https://bugzilla.suse.com/1239948","tags":["report"]},{"url":"https://bugzilla.suse.com/1244304","tags":["report"]},{"url":"https://bugzilla.suse.com/1244503","tags":["report"]},{"url":"https://bugzilla.suse.com/1251453","tags":["report"]},{"url":"https://bugzilla.suse.com/1251704","tags":["report"]},{"url":"https://bugzilla.suse.com/1264923","tags":["report"]},{"url":"https://bugzilla.suse.com/1266171","tags":["report"]},{"url":"https://bugzilla.suse.com/1266603","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-45339","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-47911","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-58190","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39821","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39827","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39828","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39829","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39830","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39831","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39832","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39833","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39834","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39835","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41506","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42508","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46595","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46597","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46598","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202622249-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202622558-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20262581-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1234563","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20262612-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2025-22868","tags":["report"]},{"url":"https://go-review.googlesource.com/c/oauth2/+/652155","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3WXUOMZG43G5AZBMH5HY5IUTZ2CLZL6M/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1239264","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4JTZ2DTLVURMW7SOEALLXE6GW75RG2MM/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1222192","tags":["report"]},{"url":"https://bugzilla.suse.com/1239291","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-27664","tags":["web"]},{"url":"","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/CKYE7I5OJNC37LL7255HIGX5ALO2LO5S/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LNQ27T4HTWIIJODQRGADXNKI7X2EGTL6/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/AU4XP3W2PVBNVPQA4YEB63MRXXOHFOUY/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/P2BVMS3UPZ5WY4VHA7P2XTPDJMOKLPXM/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3KAY6CKW45XK546N3GCKSKWNPBQG7GUO/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/WXSUXV2PEOLT2UD2VEZ6IZQTHDWIVZNI/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IKWQ6ES2RHURE5QOZDDNTWPTMPKEXYXM/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IQWUH5CIGBJCVZRE6D76AYCLT3MS47XX/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IC2EUYZRCX6GXM6Y26SHEX6QS2URIZ2I/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/27CRURJAEL5XMMKNEMZUVGHMUILSPME2/","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2024-4533","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-22872","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-47952","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-22871","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-32431","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-47291","tags":["web"]},{"url":"https://bugzilla.suse.com/1227010","tags":["report"]},{"url":"https://bugzilla.suse.com/1232948","tags":["report"]},{"url":"https://bugzilla.suse.com/1234512","tags":["report"]},{"url":"https://bugzilla.suse.com/1235265","tags":["report"]},{"url":"https://bugzilla.suse.com/1237618","tags":["report"]},{"url":"https://bugzilla.suse.com/1239225","tags":["report"]},{"url":"https://bugzilla.suse.com/1239385","tags":["report"]},{"url":"https://bugzilla.suse.com/1240466","tags":["report"]},{"url":"https://bugzilla.suse.com/1241724","tags":["report"]},{"url":"https://bugzilla.suse.com/1243633","tags":["report"]},{"url":"https://bugzilla.suse.com/1246151","tags":["report"]},{"url":"https://bugzilla.suse.com/1246730","tags":["report"]},{"url":"https://bugzilla.suse.com/1248897","tags":["report"]},{"url":"https://bugzilla.suse.com/1248937","tags":["report"]},{"url":"https://bugzilla.suse.com/1250625","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-3817","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-11065","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-21613","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-21614","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-46569","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-53547","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-58058","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13465","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-24358","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-5889","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64718","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-6545","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-6547","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-7783","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-1229","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25128","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25680","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25681","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-26278","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-26996","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27136","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2739","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27606","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27904","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33036","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33487","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42039","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42502","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42506","tags":["web"]},{"url":"https://bugzilla.suse.com/1251363","tags":["report"]},{"url":"https://bugzilla.suse.com/1251547","tags":["report"]},{"url":"https://bugzilla.suse.com/1253512","tags":["report"]},{"url":"https://bugzilla.suse.com/1253786","tags":["report"]},{"url":"https://bugzilla.suse.com/1253977","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-47913","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-47914","tags":["web"]},{"url":"https://bugzilla.suse.com/1257429","tags":["report"]},{"url":"https://bugzilla.suse.com/1260305","tags":["report"]},{"url":"https://bugzilla.suse.com/1266645","tags":["report"]},{"url":"https://bugzilla.suse.com/1267788","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-45310","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-10722","tags":["web"]},{"url":"https://bugzilla.suse.com/1239277","tags":["report"]},{"url":"https://bugzilla.suse.com/1283692","tags":["report"]},{"url":"https://bugzilla.suse.com/1288488","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-116591","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-63209","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2025-22868","title":"Unexpected memory consumption during token parsing in golang.org/x/oauth2","description":"An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing.","status":"published","published":"2025-02-26T03:07:49.012Z","modified":"2025-02-26T14:46:20.671Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-1286"],"updated_at":"2026-11-02T14:32:29.286772Z"}],"euvd":[{"id":"EUVD-2025-5341","description":"An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing.","status":"published","published":"2025-02-26T03:07:49Z","modified":"2025-02-26T14:46:20Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T20:53:23.677257Z"}],"ghsa":[{"id":"GHSA-3wqc-mwfx-672p","title":"Traefik affected by Go oauth2/jws Improper Validation of Syntactic Correctness of Input vulnerability","description":"### Summary\nWe have encountered a security vulnerability being reported by our scanners for Traefik 2.11.22.\n- https://security.snyk.io/vuln/SNYK-CHAINGUARDLATEST-TRAEFIK33-9403297\n\n### Details\nIt seems to target oauth2/jws library.\n\n### PoC\nNo steps to replicate this vulnerability\n\n### Impact\nWe have a strict control on security and we always try to stay up-to-date with the fixes received for third-party solutions.\n\n## Patches\n\n- https://github.com/traefik/traefik/releases/tag/v2.11.24\n- https://github.com/traefik/traefik/releases/tag/v3.3.6\n- https://github.com/traefik/traefik/releases/tag/v3.4.0-rc2","status":"published","published":"2025-04-18T19:32:23Z","modified":"2025-07-17T21:10:43Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-1286"],"updated_at":"2026-11-02T14:38:50.834587Z"},{"id":"GHSA-6v2p-p543-phr9","title":"golang.org/x/oauth2 Improper Validation of Syntactic Correctness of Input vulnerability","description":"An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing.","status":"published","published":"2025-07-18T17:27:22Z","modified":"2025-07-18T17:27:23Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-1286"],"updated_at":"2026-11-02T14:38:50.834587Z"}],"nvd":[{"id":"CVE-2025-22868","description":"An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing.","status":"published","published":"2025-02-26T08:14:24.897Z","modified":"2026-06-17T08:50:39.59Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-1286"],"updated_at":"2026-11-02T14:10:51.871789Z"}],"osv":[{"id":"CVE-2025-22868","description":"An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing.","status":"published","published":"2025-02-26T08:14:24.897Z","modified":"2026-11-11T01:12:02.581852937Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-11T01:47:54.277886Z"},{"id":"DEBIAN-CVE-2025-22868","description":"An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing.","status":"published","published":"2025-02-26T08:14:24.897Z","modified":"2026-09-01T20:05:44.762719119Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:45.524682Z"},{"id":"GHSA-3wqc-mwfx-672p","title":"Traefik affected by Go oauth2/jws Improper Validation of Syntactic Correctness of Input vulnerability","description":"### Summary\nWe have encountered a security vulnerability being reported by our scanners for Traefik 2.11.22.\n- https://security.snyk.io/vuln/SNYK-CHAINGUARDLATEST-TRAEFIK33-9403297\n\n### Details\nIt seems to target oauth2/jws library.\n\n### PoC\nNo steps to replicate this vulnerability\n\n### Impact\nWe have a strict control on security and we always try to stay up-to-date with the fixes received for third-party solutions.\n\n## Patches\n\n- https://github.com/traefik/traefik/releases/tag/v2.11.24\n- https://github.com/traefik/traefik/releases/tag/v3.3.6\n- https://github.com/traefik/traefik/releases/tag/v3.4.0-rc2","status":"published","published":"2025-04-18T19:32:23Z","modified":"2026-09-10T03:50:56.941519741Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-1286"],"updated_at":"2026-11-02T15:46:36.092962Z"},{"id":"GHSA-6v2p-p543-phr9","title":"golang.org/x/oauth2 Improper Validation of Syntactic Correctness of Input vulnerability","description":"An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing.","status":"published","published":"2025-07-18T17:27:22Z","modified":"2026-09-10T03:50:26.016569187Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-1286"],"updated_at":"2026-11-02T15:46:39.965326Z"},{"id":"RHSA-2025:3335","title":"Red Hat Security Advisory: opentelemetry-collector security update","status":"published","published":"2025-03-28T10:04:20Z","modified":"2026-10-20T10:03:53Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:17.133041Z"},{"id":"RHSA-2025:3593","title":"Red Hat Security Advisory: opentelemetry-collector security update","status":"published","published":"2025-04-04T10:04:19Z","modified":"2026-10-20T10:03:56Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:17.133041Z"},{"id":"RHSA-2025:7407","title":"Red Hat Security Advisory: opentelemetry-collector security update","status":"published","published":"2025-05-14T10:06:13Z","modified":"2026-10-20T10:04:05Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:17.133041Z"},{"id":"RHSA-2025:7479","title":"Red Hat Security Advisory: opentelemetry-collector security update","status":"published","published":"2025-05-14T10:06:34Z","modified":"2026-10-20T10:04:08Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:17.133041Z"},{"id":"RLSA-2025:7479","title":"Important: opentelemetry-collector security update","description":"Collector with the supported components for a Rocky Enterprise Software Foundation build of OpenTelemetry\n\nSecurity Fix(es):\n\n* go-jose: Go JOSE's Parsing Vulnerable to Denial of Service (CVE-2025-27144)\n\n* golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in golang.org/x/oauth2/jws (CVE-2025-22868)\n\n* github.com/expr-lang/expr: Memory Exhaustion in Expr Parser with Unrestricted Input (CVE-2025-29786)\n\n* golang-jwt/jwt: jwt-go allows excessive memory allocation during header parsing (CVE-2025-30204)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2025-10-03T19:56:45.27031Z","modified":"2025-10-08T17:12:39.190799Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:25.216873Z"},{"id":"ROOT-APP-GOBINARY-CVE-2025-22868","title":"CVE-2025-22868 in golang.org/x/oauth2 - Patched by Root","description":"Root has patched CVE-2025-22868 in the golang.org/x/oauth2 package for Root:Go. Multiple fixed versions available.","status":"published","published":"2026-10-23T03:04:09Z","modified":"2026-10-23T04:15:02.806830395Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:26.76659Z"},{"id":"UBUNTU-CVE-2025-22868","description":"An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing.","status":"published","published":"2025-02-26T08:14:00Z","modified":"2026-10-17T12:56:46.700596671Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T16:55:26.330196Z"},{"id":"AZL-57306","title":"CVE-2025-22868 affecting package kubernetes for versions less than 1.30.10-3","description":"An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing.","status":"published","published":"2025-02-26T08:14:24Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:21.162429Z"},{"id":"AZL-57309","title":"CVE-2025-22868 affecting package azcopy for versions less than 10.25.1-2","description":"An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing.","status":"published","published":"2025-02-26T08:14:24Z","modified":"2026-09-22T05:34:53Z","updated_at":"2026-11-02T15:28:07.209678Z"},{"id":"AZL-57312","title":"CVE-2025-22868 affecting package cert-manager for versions less than 1.12.15-2","description":"An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing.","status":"published","published":"2025-02-26T08:14:24Z","modified":"2026-09-22T05:34:53Z","updated_at":"2026-11-02T15:28:07.209678Z"},{"id":"AZL-57315","title":"CVE-2025-22868 affecting package node-problem-detector for versions less than 0.8.20-2","description":"An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing.","status":"published","published":"2025-02-26T08:14:24Z","modified":"2026-04-21T04:50:54.779621Z","updated_at":"2026-11-02T15:28:07.209678Z"},{"id":"AZL-57324","title":"CVE-2025-22868 affecting package vitess for versions less than 19.0.4-5","description":"An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing.","status":"published","published":"2025-02-26T08:14:24Z","modified":"2026-09-22T05:34:53Z","updated_at":"2026-11-02T15:28:07.209678Z"},{"id":"AZL-57335","title":"CVE-2025-22868 affecting package prometheus for versions less than 2.45.4-10","description":"An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing.","status":"published","published":"2025-02-26T08:14:24Z","modified":"2026-04-21T04:56:04.218528Z","updated_at":"2026-11-02T15:28:07.209678Z"},{"id":"AZL-57338","title":"CVE-2025-22868 affecting package influxdb for versions less than 2.7.5-2","description":"An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing.","status":"published","published":"2025-02-26T08:14:24Z","modified":"2026-09-22T05:34:53Z","updated_at":"2026-11-02T15:28:07.209678Z"},{"id":"AZL-57339","title":"CVE-2025-22868 affecting package packer for versions less than 1.9.5-6","description":"An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing.","status":"published","published":"2025-02-26T08:14:24Z","modified":"2026-10-31T15:02:25Z","updated_at":"2026-11-02T15:28:07.209678Z"},{"id":"AZL-57344","title":"CVE-2025-22868 affecting package keda for versions less than 2.14.1-3","description":"An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing.","status":"published","published":"2025-02-26T08:14:24Z","modified":"2026-10-31T15:02:25Z","updated_at":"2026-11-02T15:28:07.209678Z"},{"id":"AZL-57356","title":"CVE-2025-22868 affecting package containerized-data-importer for versions less than 1.57.0-13","description":"An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing.","status":"published","published":"2025-02-26T08:14:24Z","modified":"2026-04-21T04:56:52.641045Z","updated_at":"2026-11-02T15:28:07.209678Z"},{"id":"AZL-57363","title":"CVE-2025-22868 affecting package moby-engine for versions less than 25.0.3-11","description":"An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing.","status":"published","published":"2025-02-26T08:14:24Z","modified":"2026-10-31T15:02:25Z","updated_at":"2026-11-02T15:28:07.209678Z"},{"id":"AZL-57384","title":"CVE-2025-22868 affecting package coredns for versions less than 1.11.4-3","description":"An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing.","status":"published","published":"2025-02-26T08:14:24Z","modified":"2026-09-22T05:34:53Z","updated_at":"2026-11-02T15:28:07.209678Z"},{"id":"AZL-57389","title":"CVE-2025-22868 affecting package telegraf for versions less than 1.31.0-7","description":"An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing.","status":"published","published":"2025-02-26T08:14:24Z","modified":"2026-09-22T05:34:53Z","updated_at":"2026-11-02T15:28:07.209678Z"},{"id":"AZL-57407","title":"CVE-2025-22868 affecting package cert-manager for versions less than 1.11.2-20","description":"An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing.","status":"published","published":"2025-02-26T08:14:24Z","modified":"2026-04-21T04:36:55.637013Z","updated_at":"2026-11-02T15:28:07.209678Z"},{"id":"AZL-57410","title":"CVE-2025-22868 affecting package node-problem-detector for versions less than 0.8.17-6","description":"An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing.","status":"published","published":"2025-02-26T08:14:24Z","modified":"2026-04-21T04:36:55.915801Z","updated_at":"2026-11-02T15:28:07.209678Z"},{"id":"AZL-57422","title":"CVE-2025-22868 affecting package packer for versions less than 1.9.5-10","description":"An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing.","status":"published","published":"2025-02-26T08:14:24Z","modified":"2026-04-21T04:36:56.358463Z","updated_at":"2026-11-02T15:28:07.209678Z"},{"id":"AZL-57425","title":"CVE-2025-22868 affecting package vitess for versions less than 17.0.7-5","description":"An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing.","status":"published","published":"2025-02-26T08:14:24Z","modified":"2026-04-21T04:36:56.210781Z","updated_at":"2026-11-02T15:28:07.209678Z"},{"id":"AZL-57443","title":"CVE-2025-22868 affecting package azcopy for versions less than 10.25.1-5","description":"An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing.","status":"published","published":"2025-02-26T08:14:24Z","modified":"2026-04-21T04:36:56.285289Z","updated_at":"2026-11-02T15:28:07.209678Z"},{"id":"AZL-57449","title":"CVE-2025-22868 affecting package moby-engine for versions less than 24.0.9-15","description":"An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing.","status":"published","published":"2025-02-26T08:14:24Z","modified":"2026-04-21T04:36:56.492403Z","updated_at":"2026-11-02T15:28:07.209678Z"},{"id":"AZL-57450","title":"CVE-2025-22868 affecting package blobfuse2 for versions less than 2.1.2-8","description":"An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing.","status":"published","published":"2025-02-26T08:14:24Z","modified":"2026-04-21T04:36:56.671203Z","updated_at":"2026-11-02T15:28:07.209678Z"},{"id":"AZL-57453","title":"CVE-2025-22868 affecting package coredns for versions less than 1.11.1-14","description":"An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing.","status":"published","published":"2025-02-26T08:14:24Z","modified":"2026-04-21T04:36:56.952075Z","updated_at":"2026-11-02T15:28:07.209678Z"},{"id":"AZL-57462","title":"CVE-2025-22868 affecting package kubernetes for versions less than 1.28.4-15","description":"An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing.","status":"published","published":"2025-02-26T08:14:24Z","modified":"2026-04-21T04:36:57.007617Z","updated_at":"2026-11-02T15:28:07.209678Z"},{"id":"AZL-57467","title":"CVE-2025-22868 affecting package telegraf for versions less than 1.29.4-13","description":"An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing.","status":"published","published":"2025-02-26T08:14:24Z","modified":"2026-04-21T04:36:56.971129Z","updated_at":"2026-11-02T15:28:07.209678Z"},{"id":"GO-2025-3488","title":"Unexpected memory consumption during token parsing in golang.org/x/oauth2","description":"An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing.","status":"published","published":"2025-02-26T02:51:51Z","modified":"2026-03-24T23:55:16.543914Z","updated_at":"2026-11-02T15:47:01.728182Z"},{"id":"openSUSE-SU-2025:0091-1","title":"Security update for restic","description":"This update for restic fixes the following issues:\n\n- Fixed CVE-2025-22868: golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in golang.org/x/oauth2  (boo#1239264)\n\n- Update to version 0.17.3\n\n  - Fix #4971: Fix unusable mount on macOS Sonoma\n  - Fix #5003: Fix metadata errors during backup of removable disks\n    on Windows\n  - Fix #5101: Do not retry load/list operation if SFTP connection\n    is broken\n  - Fix #5107: Fix metadata error on Windows for backups using VSS\n  - Enh #5096: Allow prune --dry-run without lock\n\n- Update to version 0.17.2\n\n  - Fix #4004: Support container-level SAS/SAT tokens for Azure\n    backend\n  - Fix #5047: Resolve potential error during concurrent cache\n    cleanup\n  - Fix #5050: Return error if tag fails to lock repository\n  - Fix #5057: Exclude irregular files from backups\n  - Fix #5063: Correctly backup extended metadata when using VSS on\n    Windows\n\n- Update to version 0.17.1\n\n  - Fix #2004: Correctly handle volume names in backup command on\n    Windows\n  - Fix #4945: Include missing backup error text with --json\n  - Fix #4953: Correctly handle long paths on older Windows\n    versions\n  - Fix #4957: Fix delayed cancellation of certain commands\n  - Fix #4958: Don't ignore metadata-setting errors during restore\n  - Fix #4969: Correctly restore timestamp for files with resource\n    forks on macOS\n  - Fix #4975: Prevent backup --stdin-from-command from panicking\n  - Fix #4980: Skip extended attribute processing on unsupported\n    Windows volumes\n  - Fix #5004: Fix spurious 'A Required Privilege Is Not Held by\n    the Client' error\n  - Fix #5005: Fix rare failures to retry locking a repository\n  - Fix #5018: Improve HTTP/2 support for REST backend\n  - Chg #4953: Also back up files with incomplete metadata\n  - Enh #4795: Display progress bar for restore --verify\n  - Enh #4934: Automatically clear removed snapshots from cache\n  - Enh #4944: Print JSON-formatted errors during restore --json\n  - Enh #4959: Return exit code 12 for 'bad password' errors\n  - Enh #4970: Make timeout for stuck requests customizable\n\n- Update to version 0.17.0\n\n  - Fix #3600: Handle unreadable xattrs in folders above backup\n    source\n  - Fix #4209: Fix slow SFTP upload performance\n  - Fix #4503: Correct hardlink handling in stats command\n  - Fix #4568: Prevent forget --keep-tags \u003cinvalid\u003e from deleting\n    all snapshots\n  - Fix #4615: Make find not sometimes ignore directories\n  - Fix #4656: Properly report ID of newly added keys\n  - Fix #4703: Shutdown cleanly when receiving SIGTERM\n  - Fix #4709: Correct --no-lock handling of ls and tag commands\n  - Fix #4760: Fix possible error on concurrent cache cleanup\n  - Fix #4850: Handle UTF-16 password files in key command\n    correctly\n  - Fix #4902: Update snapshot summary on rewrite\n  - Chg #956: Return exit code 10 and 11 for non-existing and\n    locked repository\n  - Chg #4540: Require at least ARMv6 for ARM binaries\n  - Chg #4602: Deprecate legacy index format and s3legacy\n    repository layout\n  - Chg #4627: Redesign backend error handling to improve\n    reliability\n  - Chg #4707: Disable S3 anonymous authentication by default\n  - Chg #4744: Include full key ID in JSON output of key list\n  - Enh #662: Optionally skip snapshot creation if nothing changed\n  - Enh #693: Include snapshot size in snapshots output\n  - Enh #805: Add bitrot detection to diff command\n  - Enh #828: Improve features of the repair packs command\n  - Enh #1786: Support repositories with empty password\n  - Enh #2348: Add --delete option to restore command\n  - Enh #3067: Add extended options to configure Windows Shadow\n    Copy Service\n  - Enh #3406: Improve dump performance for large files\n  - Enh #3806: Optimize and make prune command resumable\n  - Enh #4006: (alpha) Store deviceID only for hardlinks\n  - Enh #4048: Add support for FUSE-T with mount on macOS\n  - Enh #4251: Support reading backup from a command's standard\n    output\n  - Enh #4287: Support connection to rest-server using unix socket\n  - Enh #4354: Significantly reduce prune memory usage\n  - Enh #4437: Make check command create non-existent cache\n    directory\n  - Enh #4472: Support AWS Assume Role for S3 backend\n  - Enh #4547: Add --json option to version command\n  - Enh #4549: Add --ncdu option to ls command\n  - Enh #4573: Support rewriting host and time metadata in\n    snapshots\n  - Enh #4583: Ignore s3.storage-class archive tiers for metadata\n  - Enh #4590: Speed up mount command's error detection\n  - Enh #4601: Add support for feature flags\n  - Enh #4611: Back up more file metadata on Windows\n  - Enh #4664: Make ls use message_type field in JSON output\n  - Enh #4676: Make key command's actions separate sub-commands\n  - Enh #4678: Add --target option to the dump command\n  - Enh #4708: Back up and restore SecurityDescriptors on Windows\n  - Enh #4733: Allow specifying --host via environment variable\n  - Enh #4737: Include snapshot ID in reason field of forget JSON\n    output\n  - Enh #4764: Support forgetting all snapshots\n  - Enh #4768: Allow specifying custom User-Agent for outgoing\n    requests\n  - Enh #4781: Add restore options to read include/exclude patterns\n    from files\n  - Enh #4807: Support Extended Attributes on Windows NTFS\n  - Enh #4817: Make overwrite behavior of restore customizable\n  - Enh #4839: Add dry-run support to restore command\n  for all the details see https://github.com/restic/restic/releases/tag/v0.17.0\n  or /usr/share/doc/packages/restic/CHANGELOG.md\n\n- Update to version 0.16.5\n  - Enh #4799: Add option to force use of Azure CLI credential\n  - Enh #4873: Update dependencies\n\n- Update to version 0.16.4\n  This release works around and improves detection of a bug in the\n  compression library used by restic. The resulting issue only\n  happens when using restic 0.16.3 and the max compression level\n  (the default auto and off compression levels are not affected),\n  and when the source files being backed up have specific data in\n  them to trigger the bug. If you use max compression, you can use\n  restic check --read-data to make sure you're not affected.\n\n- Update to version 0.16.3\n\n  - Fix #4560: Improve errors for irregular files on Windows\n  - Fix #4574: Support backup of deduplicated files on Windows\n    again\n  - Fix #4612: Improve error handling for rclone backend\n  - Fix #4624: Correct restore progress information if an error\n    occurs\n  - Fix #4626: Improve reliability of restoring large files\n\n- Update to version 0.16.2\n\n  - Fix #4540: Restore ARMv5 support for ARM binaries\n  - Fix #4545: Repair documentation build on Read the Docs\n\n- Update to version 0.16.1\n\n  A very long list of improvements for all the details see\n  https://github.com/restic/restic/releases/tag/v0.16.1\n  It contains an important bug fix which prevents data corruption\n  when compression is set to max.\n","status":"published","published":"2025-03-15T11:01:16Z","modified":"2026-02-04T03:47:53.226671Z","updated_at":"2026-11-02T16:58:36.976155Z"},{"id":"openSUSE-SU-2025:0103-1","title":"Security update for cadvisor","description":"This update for cadvisor fixes the following issues:\n\n- update to 0.52.1:\n\n  * Make resctrl optional/pluggable\n\n- update to 0.52.0:\n\n  * bump containerd related deps: api v1.8.0; errdefs v1.0.0; ttrpc v1.2.6\n  * chore: Update Prometheus libraries\n  * bump runc to v1.2.4\n  * Add Pressure Stall Information Metrics\n  * Switch to opencontainers/cgroups repository (includes update\n    from golang 1.22 to 1.24)\n  * Bump to newer opencontainers/image-spec @ v1.1.1\n\n- update to 0.49.2:\n\n  * Cp fix test\n  * Revert 'reduce_logs_for_kubelet_use_crio'\n\n - CVE-2025-22868: golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in golang.org/x/oauth2  (boo#1239291)\n\n- Update to version 0.49.1:\n\n  * build docker - add --provenance=false flag\n  * Remove s390x support\n  * Disable libipmctl in build\n  * Ugrade base image to 1.22 and alpine 3.18\n  * fix type of C.malloc in cgo\n  * Bump runc to v1.1.12\n  * Bump to bullseye\n  * Remove section about canary image\n  * Add note about WebUI auth\n  * Remove mentions of accelerator from the docs\n  * reduce_logs_for_kubelet_use_crio\n  * upgrade actions/checkout and actions/setup-go and actions/upload-artifact\n  * build(deps): bump golang.org/x/crypto from 0.14.0 to 0.17.0 in /cmd\n  * add cadvisor and crio upstream changes\n  * Avoid using container/podman in manager.go\n  * container: skip checking for files in non-existent directories.\n  * Adjust the log level of Initialize Plugins\n  * add ignored device\n  * fix: variable naming\n  * build(deps): bump golang.org/x/net from 0.10.0 to 0.17.0 in /cmd\n  * manager: require higher verbosity level for container info misses\n  * Information should be logged on increased verbosity only\n  * Running do mod tidy\n  * Running go mod tidy\n  * Running go mod tidy\n  * container/libcontainer: Improve limits file parsing perf\n  * container/libcontainer: Add limit parsing benchmark\n  * build(deps): bump github.com/cyphar/filepath-securejoin in /cmd\n  * build(deps): bump github.com/cyphar/filepath-securejoin\n  * Set verbosity after flag definition\n  * fix: error message typo\n  * vendor: bump runc to 1.1.9\n  * Switch to use busybox from registry.k8s.io\n  * Bump golang ci lint to v1.54.1\n  * Bump github.com/docker/docker in /cmd\n  * Bump github.com/docker/docker\n  * Bump github.com/docker/distribution in /cmd\n  * Bump github.com/docker/distribution\n  * Update genproto dependency to isolated submodule\n  * remove the check for the existence of NFS files, which will cause unnecessary requests.\n  * reduce inotify watch\n  * fix performance degradation of NFS\n  * fix: fix type issue\n  * fix: fix cgo memory leak\n  * ft: export memory kernel usage\n  * sysinfo: Ignore 'hidden' sysfs device entries\n  * Increasing required verbosity level\n  * Patch to fix issue 2341\n  * podman support: Enable Podman support.\n  * podman support: Create Podman handler.\n  * podman support: Changes in Docker handler.\n  * unit test: machine_swap_bytes\n  * Add documentation for machine_swap_bytes metric\n  * Add a machine_swap_bytes metric\n  * fix: add space trimming for label allowlist\n  * Upgrade to blang/semver/v4 v4.0.0\n  * docs(deploy/k8s): remote build for kustomize\n  * Update dependencies\n  * Change filepaths to detect online CPUs\n  * Update actions/checkout to v3\n  * Fix flags typo\n  * Updating location of kubernetes/pause image\n  * Using t.TempDir() in tests\n  * Unit test: MachineInfo Clone() method\n  * Bugfix: MachineInfo Clone() - clone SwapCapacity\n  * Optimize network metrics collection\n  * Removing calls to deprecates io/ioutil package\n  * Updating minimum Go version to 1.19\n  * Request the pid of another container if current pid is not longer valid\n  * Restructure\n  * Add CRI-O client timeout setting\n  * Set containerd grpc.MaxCallRecvMsgSize to 16MB\n  * Fix asset build\n  * feat(logging): add verbosity to non-NUMA node warning\n  * add nerdctl to ignoredDevices\n  * nvm: Change the 'no NVM devices' log.\n  * nvm: Fix typo.\n  * Fix CVE-2022-27664 (#3248)\n  * resctrl: Reduce size and mode files check (#3264)\n  * readme: Update Creatone contributor info. (#3265)\n  * Fix comment to refer to correct client\n  * build: bump golang to 1.20\n  * ci: Update golang ci-lint to v1.51.2\n  * build: Update shebang to python3\n  * Revert 'dockerfile: Fix typo in go build tags.'\n  * Decreasing verbosity level for 'Cannot read vendor id correctly, set empty'\n  * dockerfile: Fix typo in go build tags.\n  * deps: Move from cloud.google.com/go/compute -\u003e cloud.google.com/go\n  * use memory.min for reservation memory instead of high\n  * Mark GOPATH as git safe.directory to fix CI build\n  * switch to gomodule/redigo from garyburd/redigo\n  * update go.mod/sum both in root and cmd/\n  * Drop accelerator metrics and nvidia integration\n  * Add s390x support for docker image\n  * typo in MachineInfo spec for SwapCapacity\n  * add support for swap in machine/info\n","status":"published","published":"2025-03-24T17:01:45Z","modified":"2026-02-04T03:59:21.327597Z","updated_at":"2026-11-02T16:58:36.976155Z"},{"id":"openSUSE-SU-2025:14839-1","title":"teleport-17.2.9-1.1 on GA media","description":"These are all security issues fixed in the teleport-17.2.9-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-02-26T00:00:00Z","modified":"2026-02-04T04:05:44.834416Z","updated_at":"2026-11-02T16:58:37.399567Z"},{"id":"openSUSE-SU-2025:14843-1","title":"govulncheck-vulndb-0.0.20250226T025151-1.1 on GA media","description":"These are all security issues fixed in the govulncheck-vulndb-0.0.20250226T025151-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-02-27T00:00:00Z","modified":"2026-02-04T03:11:00.731256Z","updated_at":"2026-11-02T16:58:37.399567Z"},{"id":"openSUSE-SU-2025:14868-1","title":"fake-gcs-server-1.52.2-1.1 on GA media","description":"These are all security issues fixed in the fake-gcs-server-1.52.2-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-03-11T00:00:00Z","modified":"2026-02-04T02:43:04.378358Z","updated_at":"2026-11-02T16:58:37.399567Z"},{"id":"openSUSE-SU-2025:14869-1","title":"google-guest-agent-20250116.00-3.1 on GA media","description":"These are all security issues fixed in the google-guest-agent-20250116.00-3.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-03-11T00:00:00Z","modified":"2026-02-04T03:50:11.963692Z","updated_at":"2026-11-02T16:58:37.399567Z"},{"id":"openSUSE-SU-2025:14870-1","title":"google-osconfig-agent-20250115.01-3.1 on GA media","description":"These are all security issues fixed in the google-osconfig-agent-20250115.01-3.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-03-11T00:00:00Z","modified":"2026-02-04T04:00:39.696315Z","updated_at":"2026-11-02T16:58:37.399567Z"},{"id":"openSUSE-SU-2025:14874-1","title":"restic-0.17.3-2.1 on GA media","description":"These are all security issues fixed in the restic-0.17.3-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-03-11T00:00:00Z","modified":"2026-02-04T02:28:18.78244Z","updated_at":"2026-11-02T16:58:37.399567Z"},{"id":"openSUSE-SU-2025:14904-1","title":"cadvisor-0.52.1-1.1 on GA media","description":"These are all security issues fixed in the cadvisor-0.52.1-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-03-18T00:00:00Z","modified":"2026-02-04T03:05:20.299028Z","updated_at":"2026-11-02T16:58:37.399567Z"},{"id":"openSUSE-SU-2025:14905-1","title":"crane-0.20.3-2.1 on GA media","description":"These are all security issues fixed in the crane-0.20.3-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-03-18T00:00:00Z","modified":"2026-02-04T02:19:22.250522Z","updated_at":"2026-11-02T16:58:37.399567Z"},{"id":"openSUSE-SU-2025:14923-1","title":"docker-stable-24.0.9_ce-8.1 on GA media","description":"These are all security issues fixed in the docker-stable-24.0.9_ce-8.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-03-25T00:00:00Z","modified":"2026-02-04T03:32:27.913143Z","updated_at":"2026-11-02T16:58:37.399567Z"},{"id":"openSUSE-SU-2025:14985-1","title":"docker-27.5.1_ce-15.1 on GA media","description":"These are all security issues fixed in the docker-27.5.1_ce-15.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-04-11T00:00:00Z","modified":"2026-02-04T03:46:42.150188Z","updated_at":"2026-11-02T16:58:37.399567Z"},{"id":"openSUSE-SU-2025:14988-1","title":"cosign-2.5.0-1.1 on GA media","description":"These are all security issues fixed in the cosign-2.5.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-04-14T00:00:00Z","modified":"2026-02-04T02:45:13.99504Z","updated_at":"2026-11-02T16:58:37.399567Z"},{"id":"openSUSE-SU-2025:14990-1","title":"rekor-1.3.10-1.1 on GA media","description":"These are all security issues fixed in the rekor-1.3.10-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-04-14T00:00:00Z","modified":"2026-02-04T04:21:43.035081Z","updated_at":"2026-11-02T16:58:37.399567Z"},{"id":"openSUSE-SU-2025:15184-1","title":"pluto-5.21.7-1.1 on GA media","description":"These are all security issues fixed in the pluto-5.21.7-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-05-30T00:00:00Z","modified":"2026-03-23T04:53:27.393615Z","updated_at":"2026-11-02T16:58:37.399567Z"}]},"sources_more":{"osv":49}}