Security Advisory catalog GHSA-98f8-j56x-2hh4
cve-program · CVE-2025-11060 Published surrealdb https://github.com/surrealdb/surrealdb/
Original vendor version evidence · not evaluated as a NuGet range {
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "2.1.9",
"versionType": "semver"
},
{
"status": "affected",
"version": "2.2.0",
"lessThan": "2.2.8",
"versionType": "semver"
},
{
"status": "affected",
"version": "2.3.0",
"lessThan": "2.3.8",
"versionType": "semver"
},
{
"status": "affected",
"version": "3.3.0",
"lessThan": "3.3.0-alpha.7",
"versionType": "semver"
}
],
"packageName": "surrealdb",
"collectionURL": "https://github.com/surrealdb/surrealdb/",
"defaultStatus": "unaffected"
} openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9 https://access.redhat.com/downloads/content/package-browser/
Original vendor version evidence · not evaluated as a NuGet range {
"vendor": "Red Hat",
"product": "OpenShift Service Mesh 3",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9",
"defaultStatus": "affected",
"cpes": [
"cpe:/a:redhat:service_mesh:3"
]
} openshift-service-mesh/istio-cni-rhel9 https://access.redhat.com/downloads/content/package-browser/
Original vendor version evidence · not evaluated as a NuGet range {
"vendor": "Red Hat",
"product": "OpenShift Service Mesh 3",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "openshift-service-mesh/istio-cni-rhel9",
"defaultStatus": "affected",
"cpes": [
"cpe:/a:redhat:service_mesh:3"
]
} openshift-service-mesh/istio-must-gather-rhel9 https://access.redhat.com/downloads/content/package-browser/
Original vendor version evidence · not evaluated as a NuGet range {
"vendor": "Red Hat",
"product": "OpenShift Service Mesh 3",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "openshift-service-mesh/istio-must-gather-rhel9",
"defaultStatus": "affected",
"cpes": [
"cpe:/a:redhat:service_mesh:3"
]
} openshift-service-mesh/istio-pilot-rhel9 https://access.redhat.com/downloads/content/package-browser/
Original vendor version evidence · not evaluated as a NuGet range {
"vendor": "Red Hat",
"product": "OpenShift Service Mesh 3",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "openshift-service-mesh/istio-pilot-rhel9",
"defaultStatus": "affected",
"cpes": [
"cpe:/a:redhat:service_mesh:3"
]
} openshift-service-mesh/istio-proxyv2-rhel9 https://access.redhat.com/downloads/content/package-browser/
Original vendor version evidence · not evaluated as a NuGet range {
"vendor": "Red Hat",
"product": "OpenShift Service Mesh 3",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "openshift-service-mesh/istio-proxyv2-rhel9",
"defaultStatus": "affected",
"cpes": [
"cpe:/a:redhat:service_mesh:3"
]
} openshift-service-mesh/istio-rhel9-operator https://access.redhat.com/downloads/content/package-browser/
Original vendor version evidence · not evaluated as a NuGet range {
"vendor": "Red Hat",
"product": "OpenShift Service Mesh 3",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "openshift-service-mesh/istio-rhel9-operator",
"defaultStatus": "affected",
"cpes": [
"cpe:/a:redhat:service_mesh:3"
]
} openshift-service-mesh/istio-sail-operator-bundle https://access.redhat.com/downloads/content/package-browser/
Original vendor version evidence · not evaluated as a NuGet range {
"vendor": "Red Hat",
"product": "OpenShift Service Mesh 3",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "openshift-service-mesh/istio-sail-operator-bundle",
"defaultStatus": "affected",
"cpes": [
"cpe:/a:redhat:service_mesh:3"
]
} openshift-service-mesh-tech-preview/istio-ztunnel-rhel9 https://access.redhat.com/downloads/content/package-browser/
Original vendor version evidence · not evaluated as a NuGet range {
"vendor": "Red Hat",
"product": "OpenShift Service Mesh 3",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"packageName": "openshift-service-mesh-tech-preview/istio-ztunnel-rhel9",
"defaultStatus": "affected",
"cpes": [
"cpe:/a:redhat:service_mesh:3"
]
} Original source record · Cite this exact observation · Complete original publisher JSON
euvd · EUVD-2025-31339 Published EUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON.
Original publisher date fields datePublished: Sep 26, 2025, 12:01:22 PM
dateUpdated: Nov 7, 2025, 7:42:32 PM
No normalized affected-package data is projected for this source revision. The original publisher record may contain additional product and version evidence; this does not establish that a package is unaffected.
Original source record · Cite this exact observation · Complete original publisher JSON
nvd · CVE-2025-11060 Published NVD analysis and CPE criteria are source context, not proof that a package or your environment is affected. Complete affected data, logical configurations and SSVC are retained in the original JSON.
Source analysis status: Deferred
Weakness classifications: CWE-863
Original publisher date fields published: 2025-09-26T13:15:41.757
lastModified: 2026-10-09T10:10:00.193
No normalized affected-package data is projected for this source revision. The original publisher record may contain additional product and version evidence; this does not establish that a package is unaffected.
Original source record · Cite this exact observation · Complete original publisher JSON
osv · GHSA-98f8-j56x-2hh4 Withdrawn