{"id":"EUVD-2025-35718","enisaUuid":"d9b42aab-01e5-3230-a830-62e3abda8281","description":"Vault and Vault Enterprise (“Vault”) are vulnerable to an unauthenticated denial of service when processing JSON payloads. This occurs due to a regression from a previous fix for [+HCSEC-2025-24+|https://discuss.hashicorp.com/t/hcsec-2025-24-vault-denial-of-service-though-complex-json-payloads/76393]  which allowed for processing JSON payloads before applying rate limits. This vulnerability, CVE-2025-12044, is fixed in Vault Community Edition 1.21.0 and Vault Enterprise 1.16.27, 1.19.11, 1.20.5, and 1.21.0.","datePublished":"Oct 23, 2025, 7:15:16 PM","dateUpdated":"Oct 23, 2025, 8:00:16 PM","baseScore":7.5,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","references":"https://discuss.hashicorp.com/t/hcsec-2025-31-vault-vulnerable-to-denial-of-service-due-to-rate-limit-regression/76710\n","aliases":"CVE-2025-12044\nGHSA-vp5w-xcfc-73wf\n","assigner":"HashiCorp","epss":0.53,"enisaIdProduct":[{"id":"3d471e14-d106-3ae8-97c4-426b2ba02fcd","product":{"name":"Vault Enterprise","vendor":{"name":"Hashicorp"}},"product_version":"1.20.3 \u003c1.21.0"},{"id":"b1b6dd4b-1da0-30c2-91c2-103644d3fec3","product":{"name":"Vault Enterprise","vendor":{"name":"Hashicorp"}},"product_version":"1.16.25 \u003c1.16.27"},{"id":"bcd8b0f8-468d-30d5-9c70-866b78288846","product":{"name":"Vault Enterprise","vendor":{"name":"Hashicorp"}},"product_version":"1.18.14 \u003c1.18.15"},{"id":"e443912e-4315-347b-a39d-f2a4fb3adb22","product":{"name":"Vault","vendor":{"name":"Hashicorp"}},"product_version":"1.20.3 \u003c1.21.0"},{"id":"fada304e-a679-3add-b749-40c9f7779fc8","product":{"name":"Vault Enterprise","vendor":{"name":"Hashicorp"}},"product_version":"1.19.9 \u003c1.19.11"}],"enisaIdVendor":[{"id":"ad3adf0d-95f9-38f9-a53e-2903478e1762","vendor":{"name":"Hashicorp"}}],"enisaIdVulnerability":[{"id":"8bd44bab-da91-332d-ad80-6b09a6e31d49","vulnerability":{"id":"GHSA-vp5w-xcfc-73wf","description":"Hashicorp Vault and Vault Enterprise vulnerable to a denial of service when processing JSON","datePublished":"Oct 23, 2025, 9:31:44 PM","dateUpdated":"Oct 23, 2025, 10:21:45 PM","baseScore":0.0,"references":"https://nvd.nist.gov/vuln/detail/CVE-2025-12044\nhttps://github.com/hashicorp/vault/commit/b19e74c29a33ed2a99fc01626104db1a49345df3\nhttps://github.com/hashicorp/vault/commit/eedc2b7426f30e57e306229ce697ce81e203ab89\nhttps://discuss.hashicorp.com/t/hcsec-2025-31-vault-vulnerable-to-denial-of-service-due-to-rate-limit-regression/76710\nhttps://github.com/hashicorp/vault\n","enisa_id":"EUVD-2025-35718\n","aliases":"CVE-2025-12044\nGHSA-vp5w-xcfc-73wf\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 1:55:38 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"cde50971-58bc-3a41-a669-e2fd561d112d","vulnerability":{"id":"CVE-2025-12044","description":"Vault and Vault Enterprise (“Vault”) are vulnerable to an unauthenticated denial of service when processing JSON payloads. This occurs due to a regression from a previous fix for [+HCSEC-2025-24+|https://discuss.hashicorp.com/t/hcsec-2025-24-vault-denial-of-service-though-complex-json-payloads/76393]  which allowed for processing JSON payloads before applying rate limits. This vulnerability, CVE-2025-12044, is fixed in Vault Community Edition 1.21.0 and Vault Enterprise 1.16.27, 1.19.11, 1.20.5, and 1.21.0.","datePublished":"Oct 23, 2025, 7:15:16 PM","dateUpdated":"Oct 23, 2025, 8:00:16 PM","status":"PUBLISHED","baseScore":7.5,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","references":"https://discuss.hashicorp.com/t/hcsec-2025-31-vault-vulnerable-to-denial-of-service-due-to-rate-limit-regression/76710\n","enisa_id":"EUVD-2025-35718\n","assigner":"HashiCorp","epss":0.53,"dataProcessed":"Nov 6, 2026, 7:17:28 AM","vulnerabilityProduct":[{"id":"18a02073-9682-35fe-9045-0eb3954c92ec","product":{"name":"Vault Enterprise","vendor":{"name":"Hashicorp"}},"product_version":"1.20.3 \u003c1.21.0"},{"id":"a2162437-083e-39c2-b0f0-b0d2c6d11ea6","product":{"name":"Vault","vendor":{"name":"Hashicorp"}},"product_version":"1.20.3 \u003c1.21.0"},{"id":"ce8ec471-02fe-31c4-b9d0-6f4ea3318b24","product":{"name":"Vault Enterprise","vendor":{"name":"Hashicorp"}},"product_version":"1.18.14 \u003c1.18.15"},{"id":"e76717c4-d17d-3ff9-9e6f-f889f45b47cf","product":{"name":"Vault Enterprise","vendor":{"name":"Hashicorp"}},"product_version":"1.16.25 \u003c1.16.27"},{"id":"fe43eee8-39a1-3aca-b85b-b6192d15078f","product":{"name":"Vault Enterprise","vendor":{"name":"Hashicorp"}},"product_version":"1.19.9 \u003c1.19.11"}],"vulnerabilityVendor":[{"id":"a9e07f92-b85c-3259-83c1-56aeef9068f4","vendor":{"name":"Hashicorp"}}]}}],"enisaIdAdvisory":[{"id":"019d20a9-23aa-3424-b72e-aa9093ac4100","advisory":{"id":"openSUSE-SU-2025:15710-1","description":"govulncheck-vulndb-0.0.20251105T184115-1.1 on GA media","summary":"govulncheck-vulndb-0.0.20251105T184115-1.1 on GA media","datePublished":"Nov 7, 2025, 12:00:00 AM","dateUpdated":"Sep 20, 2026, 9:44:36 PM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2025_15710-1.json\nhttps://www.suse.com/security/cve/CVE-2016-11063/\nhttps://www.suse.com/security/cve/CVE-2016-11066/\nhttps://www.suse.com/security/cve/CVE-2016-11067/\nhttps://www.suse.com/security/cve/CVE-2016-11068/\nhttps://www.suse.com/security/cve/CVE-2016-11069/\nhttps://www.suse.com/security/cve/CVE-2016-11070/\nhttps://www.suse.com/security/cve/CVE-2016-11071/\nhttps://www.suse.com/security/cve/CVE-2016-11072/\nhttps://www.suse.com/security/cve/CVE-2016-11073/\nhttps://www.suse.com/security/cve/CVE-2016-11074/\nhttps://www.suse.com/security/cve/CVE-2016-11075/\nhttps://www.suse.com/security/cve/CVE-2016-11076/\nhttps://www.suse.com/security/cve/CVE-2016-11077/\nhttps://www.suse.com/security/cve/CVE-2016-11078/\nhttps://www.suse.com/security/cve/CVE-2016-11079/\nhttps://www.suse.com/security/cve/CVE-2016-11080/\nhttps://www.suse.com/security/cve/CVE-2016-11081/\nhttps://www.suse.com/security/cve/CVE-2016-11082/\nhttps://www.suse.com/security/cve/CVE-2016-11083/\nhttps://www.suse.com/security/cve/CVE-2016-11084/\nhttps://www.suse.com/security/cve/CVE-2017-18872/\nhttps://www.suse.com/security/cve/CVE-2023-32199/\nhttps://www.suse.com/security/cve/CVE-2024-58269/\nhttps://www.suse.com/security/cve/CVE-2025-10545/\nhttps://www.suse.com/security/cve/CVE-2025-10678/\nhttps://www.suse.com/security/cve/CVE-2025-10954/\nhttps://www.suse.com/security/cve/CVE-2025-11374/\nhttps://www.suse.com/security/cve/CVE-2025-11375/\nhttps://www.suse.com/security/cve/CVE-2025-11579/\nhttps://www.suse.com/security/cve/CVE-2025-11621/\nhttps://www.suse.com/security/cve/CVE-2025-12044/\nhttps://www.suse.com/security/cve/CVE-2025-26625/\nhttps://www.suse.com/security/cve/CVE-2025-27093/\nhttps://www.suse.com/security/cve/CVE-2025-41410/\nhttps://www.suse.com/security/cve/CVE-2025-41443/\nhttps://www.suse.com/security/cve/CVE-2025-54286/\nhttps://www.suse.com/security/cve/CVE-2025-54287/\nhttps://www.suse.com/security/cve/CVE-2025-54288/\nhttps://www.suse.com/security/cve/CVE-2025-54289/\nhttps://www.suse.com/security/cve/CVE-2025-54290/\nhttps://www.suse.com/security/cve/CVE-2025-54291/\nhttps://www.suse.com/security/cve/CVE-2025-54293/\nhttps://www.suse.com/security/cve/CVE-2025-54469/\nhttps://www.suse.com/security/cve/CVE-2025-54470/\nhttps://www.suse.com/security/cve/CVE-2025-54471/\nhttps://www.suse.com/security/cve/CVE-2025-54499/\nhttps://www.suse.com/security/cve/CVE-2025-58073/\nhttps://www.suse.com/security/cve/CVE-2025-58075/\nhttps://www.suse.com/security/cve/CVE-2025-58356/\nhttps://www.suse.com/security/cve/CVE-2025-59043/\nhttps://www.suse.com/security/cve/CVE-2025-59048/\nhttps://www.suse.com/security/cve/CVE-2025-59530/\nhttps://www.suse.com/security/cve/CVE-2025-59836/\nhttps://www.suse.com/security/cve/CVE-2025-59937/\nhttps://www.suse.com/security/cve/CVE-2025-61141/\nhttps://www.suse.com/security/cve/CVE-2025-61524/\nhttps://www.suse.com/security/cve/CVE-2025-61581/\nhttps://www.suse.com/security/cve/CVE-2025-61688/\nhttps://www.suse.com/security/cve/CVE-2025-62156/\nhttps://www.suse.com/security/cve/CVE-2025-62157/\nhttps://www.suse.com/security/cve/CVE-2025-62375/\nhttps://www.suse.com/security/cve/CVE-2025-62506/\nhttps://www.suse.com/security/cve/CVE-2025-62513/\nhttps://www.suse.com/security/cve/CVE-2025-62705/\nhttps://www.suse.com/security/cve/CVE-2025-62714/\nhttps://www.suse.com/security/cve/CVE-2025-62725/\nhttps://www.suse.com/security/cve/CVE-2025-62820/\nhttps://www.suse.com/security/cve/CVE-2025-64101/\nhttps://www.suse.com/security/cve/CVE-2025-64102/\nhttps://www.suse.com/security/cve/CVE-2025-64103/\n","aliases":"CVE-2016-11063\nCVE-2016-11066\nCVE-2016-11067\nCVE-2016-11068\nCVE-2016-11069\nCVE-2016-11070\nCVE-2016-11071\nCVE-2016-11072\nCVE-2016-11073\nCVE-2016-11074\nCVE-2016-11075\nCVE-2016-11076\nCVE-2016-11077\nCVE-2016-11078\nCVE-2016-11079\nCVE-2016-11080\nCVE-2016-11081\nCVE-2016-11082\nCVE-2016-11083\nCVE-2016-11084\nCVE-2017-18872\nCVE-2023-32199\nCVE-2024-58269\nCVE-2025-10545\nCVE-2025-10678\nCVE-2025-10954\nCVE-2025-11374\nCVE-2025-11375\nCVE-2025-11579\nCVE-2025-11621\nCVE-2025-12044\nCVE-2025-26625\nCVE-2025-27093\nCVE-2025-41410\nCVE-2025-41443\nCVE-2025-54286\nCVE-2025-54287\nCVE-2025-54288\nCVE-2025-54289\nCVE-2025-54290\nCVE-2025-54291\nCVE-2025-54293\nCVE-2025-54469\nCVE-2025-54470\nCVE-2025-54471\nCVE-2025-54499\nCVE-2025-58073\nCVE-2025-58075\nCVE-2025-58356\nCVE-2025-59043\nCVE-2025-59048\nCVE-2025-59530\nCVE-2025-59836\nCVE-2025-59937\nCVE-2025-61141\nCVE-2025-61524\nCVE-2025-61581\nCVE-2025-61688\nCVE-2025-62156\nCVE-2025-62157\nCVE-2025-62375\nCVE-2025-62506\nCVE-2025-62513\nCVE-2025-62705\nCVE-2025-62714\nCVE-2025-62725\nCVE-2025-62820\nCVE-2025-64101\nCVE-2025-64102\nCVE-2025-64103\n","source":{"id":21,"name":"csaf_opensuse"},"advisoryProduct":[{"id":"1a23be4f-881a-3b69-af30-f47e7bd822db","product":{"name":"govulncheck-vulndb-0:0.0.20251105T184115-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"2ed33f7b-f8d3-3670-bc12-20339a40cad4","product":{"name":"govulncheck-vulndb-0.0.20251105T184115-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"3ff168c0-43f0-3e6a-a46b-90f0b9322304","product":{"name":"govulncheck-vulndb-0:0.0.20251105T184115-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"6b082ef7-48e6-329d-a108-2122d2ee3fe7","product":{"name":"govulncheck-vulndb-0:0.0.20251105T184115-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"6df9e33c-98f3-3e85-bd98-4153a1025f74","product":{"name":"govulncheck-vulndb-0.0.20251105T184115-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"70fcae35-efbf-33bd-b653-2c72a0a85d73","product":{"name":"govulncheck-vulndb-0:0.0.20251105T184115-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"73a13c93-e86b-3658-97c0-52e119937024","product":{"name":"openSUSE Tumbleweed","vendor":{"name":"SUSE"}}},{"id":"dc8dabed-45c9-3497-b3f5-b41e45657724","product":{"name":"govulncheck-vulndb-0.0.20251105T184115-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"eb1e91f2-e5cf-3808-8f1f-c394962ed62d","product":{"name":"govulncheck-vulndb-0.0.20251105T184115-1.1.x86_64","vendor":{"name":"SUSE"}}}]}},{"id":"37d1625e-d322-3e33-87a9-d3d4b5e4403a","advisory":{"id":"RHSA-2025:21984","description":"Red Hat Security Advisory: RHTAS 1.3.1 - Red Hat Trusted Artifact Signer Release","summary":"The 1.3.1 release of Red Hat Trusted Artifact Signer OpenShift Operator.\nFor more details please visit the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3","datePublished":"Nov 24, 2025, 5:11:01 PM","dateUpdated":"Sep 6, 2026, 4:20:52 AM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2025:21984\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_21984.json\n","aliases":"CVE-2025-11621\nCVE-2025-12044\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"03e3927e-b088-3d67-809f-83b5a5083962","product":{"name":"Red Hat Trusted Artifact Signer 1.3","vendor":{"name":"Red Hat"}}},{"id":"5f569fd5-1c60-3241-853d-6efbcb0f82cc","product":{"name":"registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:7b3eb9108c50321278ccad2032b3fb365911df83084cca953dd068cdd51f7874_amd64","vendor":{"name":"Red Hat"}}}]}},{"id":"4a46308e-5d65-3d1c-8de0-e85ac8d0dff9","advisory":{"id":"WID-SEC-W-2025-2396","description":"Hashicorp Vault: Mehrere Schwachstellen","summary":"Ein entfernter, authentisierter oder anonymer Angreifer kann mehrere Schwachstellen in Hashicorp Vault ausnutzen, um Sicherheitsvorkehrungen zu umgehen oder einen Denial-of-Service-Zustand zu erzeugen.","datePublished":"Oct 23, 2025, 10:00:00 PM","dateUpdated":"Nov 24, 2025, 11:00:00 PM","baseScore":0.0,"references":"https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-2396.json\nhttps://wid.cert-bund.de/portal/wid/securityadvisory?name\u003dWID-SEC-2025-2396\n","aliases":"CVE-2025-11621\nCVE-2025-12044\n","source":{"id":8,"name":"csaf_certbund"},"advisoryProduct":[{"id":"05c11b86-9199-335c-aa1b-30252aad729e","product":{"name":"Enterprise 1.20.5","vendor":{"name":"Hashicorp"}}},{"id":"546f3373-994c-3493-b12b-e51408ca6f67","product":{"name":"Red Hat Enterprise Linux","vendor":{"name":"Red Hat"}}},{"id":"5c0ecf7b-e00f-3303-b022-23bcb4323644","product":{"name":"Enterprise 1.16.27","vendor":{"name":"Hashicorp"}}},{"id":"5c88d910-6a16-3d87-8a87-0f066376c667","product":{"name":"Vault","vendor":{"name":"Hashicorp"}}},{"id":"70cdaf87-f6be-3701-8abe-faa95a6b01a0","product":{"name":"Enterprise 1.21.0","vendor":{"name":"Hashicorp"}}},{"id":"b12adcf9-4fbe-3d83-a913-dd060d89cf94","product":{"name":"Community Edition 1.21.0","vendor":{"name":"Hashicorp"}}},{"id":"cdaa76bc-3cc5-3fcb-b81b-33dd8b817e9d","product":{"name":"Enterprise 1.19.11","vendor":{"name":"Hashicorp"}}}]}},{"id":"6c162461-c0f1-3196-964f-956b17aa5e8e","advisory":{"id":"RHSA-2025:22058","description":"Red Hat Security Advisory: RHTAS 1.3.1 - Tech Preview Release Of the Policy Controller Operator","summary":"The Tech Preview release of the RHTAS Policy Controller Operator.\nFor more details please visit the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3","datePublished":"Nov 25, 2025, 8:59:13 AM","dateUpdated":"Sep 6, 2026, 4:22:36 AM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2025:22058\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_22058.json\n","aliases":"CVE-2025-11621\nCVE-2025-12044\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"b2576015-f31c-36e0-bf0b-fbe6f11e3f5f","product":{"name":"registry.redhat.io/rhtas/policy-controller-rhel9@sha256:7172d6a08594cccd155c2f74110cfbafadb812af84bb6b75c8bec1e3c416bd26_amd64","vendor":{"name":"Red Hat"}}},{"id":"cf7e9216-d175-31c3-8ba0-f7587fee97dd","product":{"name":"Red Hat Trusted Artifact Signer 1.3","vendor":{"name":"Red Hat"}}}]}},{"id":"827c98d7-80e7-3e4f-8653-e570e62ed7b1","advisory":{"id":"RHSA-2025:21988","description":"Red Hat Security Advisory: RHTAS 1.3.1 - Red Hat Trusted Artifact Signer Release","summary":"The 1.3.1 release of Red Hat Trusted Artifact Signer OpenShift Operator.\nFor more details please visit the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3","datePublished":"Nov 24, 2025, 5:31:18 PM","dateUpdated":"Sep 6, 2026, 4:22:30 AM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2025:21988\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_21988.json\n","aliases":"CVE-2025-11621\nCVE-2025-12044\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"7a02c775-504c-3fe9-ba54-7a4252ecd011","product":{"name":"Red Hat Trusted Artifact Signer 1.3","vendor":{"name":"Red Hat"}}},{"id":"85d65472-73f9-3647-a7d7-b7456b89abec","product":{"name":"registry.redhat.io/rhtas/gitsign-rhel9@sha256:882d508ec7d71fb3e13ee240ee295ee91884700d63029bb58bd456b6d23fd5e0_amd64","vendor":{"name":"Red Hat"}}},{"id":"9043f57d-bf7f-39dc-a256-1a4e52f01e66","product":{"name":"registry.redhat.io/rhtas/cosign-rhel9@sha256:a6f3dba2c7ec8cdf7a87a2e8679da66c2248b44c7e15611205f096a6c1629f88_amd64","vendor":{"name":"Red Hat"}}},{"id":"a13792ca-3273-38f9-8d86-c3700b323d27","product":{"name":"registry.redhat.io/rhtas/client-server-rhel9@sha256:cddda466bc9957f1c3902da3a0cf37ef3ec08f4aeb8c50a421405540120b75cf_amd64","vendor":{"name":"Red Hat"}}}]}},{"id":"9b6025bc-fb25-3715-b577-178c641fd845","advisory":{"id":"RHSA-2025:21976","description":"Red Hat Security Advisory: RHTAS 1.3.1 - Red Hat Trusted Artifact Signer Release","summary":"The 1.3.1 release of Red Hat Trusted Artifact Signer OpenShift Operator.\nFor more details please visit the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3","datePublished":"Nov 24, 2025, 4:14:59 PM","dateUpdated":"Sep 6, 2026, 4:22:33 AM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2025:21976\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_21976.json\n","aliases":"CVE-2025-11621\nCVE-2025-12044\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"476878a3-5ad7-3cf2-8c83-587a922049bb","product":{"name":"registry.redhat.io/rhtas/fulcio-rhel9@sha256:b19900ebbf9cac67196127a60ea2434a8ce2011b17bab15a0e7fc96cf38a63fa_amd64","vendor":{"name":"Red Hat"}}},{"id":"a2401502-36b7-3482-a47e-0038c64a0827","product":{"name":"Red Hat Trusted Artifact Signer 1.3","vendor":{"name":"Red Hat"}}}]}},{"id":"bdbd10b3-479b-385d-9d1d-345c2158f4d9","advisory":{"id":"RHSA-2025:21981","description":"Red Hat Security Advisory: RHTAS 1.3.1 - Red Hat Trusted Artifact Signer Release","summary":"The 1.3.1 release of Red Hat Trusted Artifact Signer OpenShift Operator.\nFor more details please visit the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3","datePublished":"Nov 24, 2025, 4:47:41 PM","dateUpdated":"Sep 6, 2026, 4:22:39 AM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2025:21981\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_21981.json\n","aliases":"CVE-2025-11621\nCVE-2025-12044\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"7ddb3e61-9b40-394d-b1bd-a4c3cf3291bd","product":{"name":"registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:57f1db8dd5e9cb42078a20c065c1f3052175a88d77b656f4c8e903ab40088303_amd64","vendor":{"name":"Red Hat"}}},{"id":"813c087b-11fb-3044-9c9a-57e39d7d4a96","product":{"name":"registry.redhat.io/rhtas/rekor-server-rhel9@sha256:799b0b86f83f0fdf450ecbd2726419570b15f6ec5ba5b814750d45b8269e4dac_amd64","vendor":{"name":"Red Hat"}}},{"id":"bdfb7d3b-8be0-3cf4-90ce-d8338fb3f3d3","product":{"name":"registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:3782ef36eac0a40b3b8d018476d0af7505d2a81f0ccb993644e8c5f20f1cd566_amd64","vendor":{"name":"Red Hat"}}},{"id":"eebbc403-4fb0-3b0b-92af-ce0ed28c0a42","product":{"name":"Red Hat Trusted Artifact Signer 1.3","vendor":{"name":"Red Hat"}}}]}},{"id":"d3e5e225-e616-3336-8469-11fd21e52983","advisory":{"id":"RHSA-2026:3827","description":"Red Hat Security Advisory: Red Hat OpenShift Pipelines Release 1.20.3","summary":"The 1.20.3 GA release of Red Hat OpenShift Pipelines Operator..\nFor more details see [product documentation](https://docs.redhat.com/en/documentation/red_hat_openshift_pipelines).","datePublished":"Mar 5, 2026, 7:31:32 AM","dateUpdated":"Oct 31, 2026, 11:25:45 PM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:3827\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_3827.json\n","aliases":"CVE-2025-11621\nCVE-2025-12044\nCVE-2025-47913\nCVE-2025-61729\nCVE-2025-66506\nCVE-2025-66564\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"039b9e87-2607-3950-a6e2-9a8f0cdec0df","product":{"name":"registry.redhat.io/openshift-pipelines/pipelines-opc-rhel9@sha256:cd4d671c485fe1ffc4fb45734890cb258fddc1658b7e161bee72e1787fd861e6_arm64","vendor":{"name":"Red Hat"}}},{"id":"247ab72d-b105-3142-af19-901c941fea8a","product":{"name":"registry.redhat.io/openshift-pipelines/pipelines-opc-rhel9@sha256:67e5fd28f10c59bfb6be12fcd3702561b8dc4e6c237a77a38839370d59749154_s390x","vendor":{"name":"Red Hat"}}},{"id":"25d10979-9f2f-3857-b79b-a1cf3ff63c1c","product":{"name":"registry.redhat.io/openshift-pipelines/pipelines-cli-tkn-rhel9@sha256:05d553e2c0d86956b32281aa6ae7ffa1948073f753889007f041eb2a72cbfa91_ppc64le","vendor":{"name":"Red Hat"}}},{"id":"4d5c353e-111c-387e-8de8-bf6a10234aab","product":{"name":"registry.redhat.io/openshift-pipelines/pipelines-serve-tkn-cli-rhel9@sha256:d17123e7d12d05e7c56cb8cf8c70a0ea2f477b33e529b8db43e3df8b112d353a_ppc64le","vendor":{"name":"Red Hat"}}},{"id":"5f594507-c7b8-36b9-bb32-3c625fdeef43","product":{"name":"registry.redhat.io/openshift-pipelines/pipelines-serve-tkn-cli-rhel9@sha256:6c868d7ba256b73c66abfb5cbaea0a6d09107c9e90f0deea471d689d1d7bca95_s390x","vendor":{"name":"Red Hat"}}},{"id":"68923c84-c1c5-3207-9065-4e3689e0b4e4","product":{"name":"registry.redhat.io/openshift-pipelines/pipelines-cli-tkn-rhel9@sha256:9f4bdd415c1e06da1e37e872228e31f4b6ff4890aab7efca0b835ff92ec740cf_arm64","vendor":{"name":"Red Hat"}}},{"id":"6c295e42-c3c8-35cd-aebd-5fa4b8d9b446","product":{"name":"Red Hat OpenShift Pipelines 1.2","vendor":{"name":"Red Hat"}}},{"id":"78ff6a6b-bec9-321c-b601-fc78dd2501b1","product":{"name":"registry.redhat.io/openshift-pipelines/pipelines-cli-tkn-rhel9@sha256:1953e97a47dc441f2cd7a2f450aeb5c1792d180539c4756673d0f76679f29da9_amd64","vendor":{"name":"Red Hat"}}},{"id":"9c03e64c-3443-3a01-8243-a41a46bf932a","product":{"name":"Red Hat OpenShift Pipelines 1.20","vendor":{"name":"Red Hat"}}},{"id":"b8ecc69d-1e91-3787-97be-bcd3195f2f8e","product":{"name":"registry.redhat.io/openshift-pipelines/pipelines-serve-tkn-cli-rhel9@sha256:838a518d67dabba6dc212c88c69d8897422f35a5047e82c10fe3830869d98041_arm64","vendor":{"name":"Red Hat"}}},{"id":"c6bf8c5d-69ed-3960-adb8-274c4a52da33","product":{"name":"registry.redhat.io/openshift-pipelines/pipelines-opc-rhel9@sha256:1f07ea20761776124173a9aab05b072b7ff1de84844a1e9b58cdcbf343ab99e6_amd64","vendor":{"name":"Red Hat"}}},{"id":"d5c92046-a345-3565-ac35-d123f3581f92","product":{"name":"registry.redhat.io/openshift-pipelines/pipelines-serve-tkn-cli-rhel9@sha256:a5ce1906f4466a88cc0228ab798462120b938622f5ddd89e6826ae3bff968e5b_amd64","vendor":{"name":"Red Hat"}}},{"id":"ef1eb845-3166-349c-a480-a83fcd9969bf","product":{"name":"registry.redhat.io/openshift-pipelines/pipelines-cli-tkn-rhel9@sha256:66be750a2e2abe15579892d3f8d77058d79f165bd60b867a5d37716a277a6b59_s390x","vendor":{"name":"Red Hat"}}},{"id":"f4b64a56-8831-37ef-8dc6-264a22026123","product":{"name":"registry.redhat.io/openshift-pipelines/pipelines-opc-rhel9@sha256:a088a44bb4d11ecf877dc035f351a3500353ec3c8c6a6955d5eb1d6908bf40e3_ppc64le","vendor":{"name":"Red Hat"}}}]}}]}