EUVD-2025-201319Published

Sigstore Timestamp Authority is a service for issuing RFC 3161 timestamps. Prior to 2.0.3, Function api.ParseJSONRequest currently splits (via a call to strings.Split) an optionally-provided OID (which is untrusted data) on periods. Similar…

Exact source revision recorded 5 Nov 2026 02:58:16 UTC. It does not establish the source's current position. Latest evidence.

Recorded JSON

euvd · EUVD-2025-201319

Published

EUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON.

Original publisher date fields

datePublished: Dec 4, 2025, 10:37:13 PM

dateUpdated: Dec 5, 2025, 2:55:53 PM

12 related source bulletins · separate from aliases

RHSA-2026:2144: Red Hat Security Advisory: RHTAS 1.3.2 - Red Hat Trusted Artifact Signer Release

CVE-2025-61729 · CVE-2025-64756 · CVE-2025-66418 · CVE-2025-66471 · CVE-2025-66506 · CVE-2025-66564 · CVE-2026-21441 · CVE-2026-22772 · CVE-2026-22774 · CVE-2026-22775 · CVE-2026-23745 · CVE-2026-23950

RHSA-2026:1517: Red Hat Security Advisory: RHACS 4.8.8 security and bug fix update

CVE-2025-12816 · CVE-2025-15284 · CVE-2025-58183 · CVE-2025-61729 · CVE-2025-66031 · CVE-2025-66506 · CVE-2025-66564 · CVE-2025-68428 · CVE-2025-68973 · CVE-2026-22029

RHSA-2026:3825: Red Hat Security Advisory: Red Hat OpenShift Pipelines Release 1.20.3

CVE-2025-12816 · CVE-2025-13465 · CVE-2025-15284 · CVE-2025-66506 · CVE-2025-66564

RHSA-2026:3710: Red Hat Security Advisory: Red Hat OpenShift Pipelines Release 1.15.3

CVE-2024-37890 · CVE-2025-6545 · CVE-2025-6547 · CVE-2025-9287 · CVE-2025-9288 · CVE-2025-12816 · CVE-2025-13465 · CVE-2025-15284 · CVE-2025-66031 · CVE-2025-66506 · CVE-2025-66564

RHSA-2026:2568: Red Hat Security Advisory: RHACS 4.9.3 security and bug fix update

CVE-2025-12816 · CVE-2025-15284 · CVE-2025-58183 · CVE-2025-66031 · CVE-2025-66506 · CVE-2025-66564 · CVE-2025-68428 · CVE-2025-68973 · CVE-2026-22029

RHSA-2026:3087: Red Hat Security Advisory: RHTAS 1.3.2 - Red Hat Trusted Artifact Signer Release

CVE-2025-13465 · CVE-2025-61729 · CVE-2025-66564 · CVE-2026-22029 · CVE-2026-25639

RHSA-2026:2350: Red Hat Security Advisory: RHACS 4.9.3 security and bug fix update

CVE-2025-12816 · CVE-2025-15284 · CVE-2025-58183 · CVE-2025-66031 · CVE-2025-66506 · CVE-2025-66564 · CVE-2025-68428 · CVE-2025-68973 · CVE-2026-22029

RHSA-2026:3712: Red Hat Security Advisory: Red Hat OpenShift Pipelines Release 1.15.4

CVE-2024-37890 · CVE-2025-6545 · CVE-2025-6547 · CVE-2025-9287 · CVE-2025-9288 · CVE-2025-12816 · CVE-2025-13465 · CVE-2025-15284 · CVE-2025-66031 · CVE-2025-66506 · CVE-2025-66564

openSUSE-SU-2026:20191-1: Security update for trivy

CVE-2025-64702 · CVE-2025-66564

openSUSE-SU-2026:10131-1: trivy-0.69.0-1.1 on GA media

CVE-2025-64702 · CVE-2025-66564

RHSA-2026:2852: Red Hat Security Advisory: OpenShift Security Profiles Operator bug fix and enhancement update

CVE-2025-66506 · CVE-2025-66564

RHSA-2026:3827: Red Hat Security Advisory: Red Hat OpenShift Pipelines Release 1.20.3

CVE-2025-11621 · CVE-2025-12044 · CVE-2025-47913 · CVE-2025-61729 · CVE-2025-66506 · CVE-2025-66564

No normalized affected-package data is projected for this source revision. The original publisher record may contain additional product and version evidence; this does not establish that a package is unaffected.

Original source record · Cite this exact observation · Complete original publisher JSON