CVE catalog
CVE-2025-22868
golang-golang-x-oauth2: CVE-2025-22868
- Severity
- High · CVSS 7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Published
- Source
- [NVD] · [CVE record]
- EPSS
- 0.87% · Oct 25, 2026
An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Debian | golang-golang-x-oauth2 | sid | 0.37.0-1 | fixed |
| Debian | golang-golang-x-oauth2 | forky | 0.37.0-1 | fixed |
| Debian | golang-golang-x-oauth2 | trixie | 0.27.0-1 | fixed |
| Debian | golang-golang-x-oauth2 | bookworm | 0.3.0-1 | vulnerable |
| Go | golang.org/x/oauth2 | Not reported | 0.27.0 | fixed |
| Opensuse | google-guest-agent | leap 16.0 | 20260430.00-160000.1.1 | fixed |
| Suse | google-guest-agent | linux micro 6.1 | 20260430.00-slfo.1.1_1.1 | fixed |
| Suse | google-guest-agent | linux enterprise server 16.0 | 20260430.00-160000.1.1 | fixed |
| Suse | google-guest-agent | linux enterprise server for sap applications 16.0 | 20260430.00-160000.1.1 | fixed |
| Opensuse | trivy | tumbleweed | 0.65.0-1.1 | fixed |
| Opensuse | pluto | tumbleweed | 5.21.7-1.1 | fixed |
| Suse | docker | linux micro 6.1 | 27.5.1_ce-slfo.1.1_3.1 | fixed |
| Suse | docker | linux micro 6.0 | 27.5.1_ce-3.1 | fixed |
| Suse | ignition | linux enterprise micro 5.1 | 2.14.0-150300.4.13.1 | fixed |
| Suse | ignition | linux enterprise micro 5.4 | 2.15.0-150400.4.11.1 | fixed |
| Suse | ignition | linux micro 6.0 | 2.19.0-2.1 | fixed |
| Suse | ignition | linux enterprise micro 5.2 | 2.14.0-150300.6.13.1 | fixed |
| Suse | ignition | linux enterprise micro 5.3 | 2.14.0-150400.4.9.1 | fixed |
| Opensuse | teleport | tumbleweed | 17.2.9-1.1 | fixed |
| Opensuse | google-osconfig-agent | tumbleweed | 20250115.01-3.1 | fixed |
| Opensuse | google-guest-agent | tumbleweed | 20250116.00-3.1 | fixed |
| Suse | restic | package hub 15 sp6 | 0.17.3-bp156.2.3.1 | fixed |
| Opensuse | restic | leap 15.6 | 0.17.3-bp156.2.3.1 | fixed |
| Suse | ignition | linux enterprise module for hpc 15 sp6 | 2.14.0-150400.9.9.1 | fixed |
| Suse | ignition | linux enterprise module for hpc 15 sp7 | 2.14.0-150400.9.9.1 | fixed |
| Opensuse | ignition | leap 15.6 | 2.14.0-150400.9.9.1 | fixed |
| Opensuse | docker-stable | tumbleweed | 24.0.9_ce-8.1 | fixed |
| Suse | google-guest-agent | linux enterprise module for public cloud 12 | 20250116.00-1.47.2 | fixed |
| Suse | ignition | linux enterprise micro 5.5 | 2.17.0-150500.3.12.1 | fixed |
| Opensuse | govulncheck-vulndb | tumbleweed | 0.0.20250226T025151-1.1 | fixed |
| Opensuse | cadvisor | tumbleweed | 0.52.1-1.1 | fixed |
| Suse | google-guest-agent | linux enterprise micro 5.5 | 20250116.00-150000.1.57.1 | fixed |
| Suse | google-guest-agent | linux enterprise module for public cloud 15 sp3 | 20250116.00-150000.1.57.1 | fixed |
| Suse | google-guest-agent | linux enterprise module for public cloud 15 sp4 | 20250116.00-150000.1.57.1 | fixed |
| Suse | google-guest-agent | linux enterprise module for public cloud 15 sp5 | 20250116.00-150000.1.57.1 | fixed |
| Suse | google-guest-agent | linux enterprise module for public cloud 15 sp6 | 20250116.00-150000.1.57.1 | fixed |
| Opensuse | google-guest-agent | leap 15.6 | 20250116.00-150000.1.57.1 | fixed |
| Opensuse | fake-gcs-server | tumbleweed | 1.52.2-1.1 | fixed |
| Suse | google-cloud-sap-agent | linux enterprise module for public cloud 12 | 3.6-6.43.1 | fixed |
| Opensuse | restic | tumbleweed | 0.17.3-2.1 | fixed |
| Opensuse | go-containerregistry | tumbleweed | 0.20.3-2.1 | fixed |
| Suse | google-osconfig-agent | linux enterprise micro 5.5 | 20250115.01-150000.1.47.1 | fixed |
| Suse | google-osconfig-agent | linux enterprise module for public cloud 15 sp3 | 20250115.01-150000.1.47.1 | fixed |
| Suse | google-osconfig-agent | linux enterprise module for public cloud 15 sp4 | 20250115.01-150000.1.47.1 | fixed |
| Suse | google-osconfig-agent | linux enterprise module for public cloud 15 sp5 | 20250115.01-150000.1.47.1 | fixed |
| Suse | google-osconfig-agent | linux enterprise module for public cloud 15 sp6 | 20250115.01-150000.1.47.1 | fixed |
| Opensuse | google-osconfig-agent | leap 15.6 | 20250115.01-150000.1.47.1 | fixed |
| Suse | google-osconfig-agent | linux enterprise module for public cloud 12 | 20250115.01-1.38.1 | fixed |
| Suse | google-cloud-sap-agent | linux enterprise module for public cloud 15 sp3 | 3.6-150100.3.44.1 | fixed |
| Suse | google-cloud-sap-agent | linux enterprise module for public cloud 15 sp4 | 3.6-150100.3.44.1 | fixed |
| Suse | google-cloud-sap-agent | linux enterprise module for public cloud 15 sp5 | 3.6-150100.3.44.1 | fixed |
| Suse | google-cloud-sap-agent | linux enterprise module for public cloud 15 sp6 | 3.6-150100.3.44.1 | fixed |
| Opensuse | google-cloud-sap-agent | leap 15.6 | 3.6-150100.3.44.1 | fixed |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Debian | golang-golang-x-oauth2 | source | sid | 0.27.0-1 | not yet assigned | Not reported | [1098967] |
| Debian | golang-golang-x-oauth2 | source | forky | 0.27.0-1 | not yet assigned | Not reported | [1098967] |
| Debian | golang-golang-x-oauth2 | source | trixie | 0.27.0-1 | not yet assigned | Not reported | [1098967] |
| Debian | golang-golang-x-oauth2 | source | bookworm | (unfixed) | not yet assigned | Not reported | [1098967] |
| Go | golang.org/x/oauth2 | Go | Not reported | 0.27.0 | Not reported | GHSA-6V2P-P543-PHR9 | Not reported |
| Opensuse | google-guest-agent | rpm | leap 16.0 | 20260430.00-160000.1.1 | Not reported | OPENSUSE-SU-2026:20969-1 | Not reported |
| Suse | google-guest-agent | rpm | linux micro 6.1 | 20260430.00-slfo.1.1_1.1 | Not reported | SUSE-SU-2026:22133-1 | Not reported |
| Suse | google-guest-agent | rpm | linux enterprise server 16.0 | 20260430.00-160000.1.1 | Not reported | SUSE-SU-2026:22128-1 | Not reported |
| Suse | google-guest-agent | rpm | linux enterprise server for sap applications 16.0 | 20260430.00-160000.1.1 | Not reported | SUSE-SU-2026:22128-1 | Not reported |
| Opensuse | trivy | rpm | tumbleweed | 0.65.0-1.1 | Not reported | OPENSUSE-SU-2025:15454-1 | Not reported |
| Opensuse | pluto | rpm | tumbleweed | 5.21.7-1.1 | Not reported | OPENSUSE-SU-2025:15184-1 | Not reported |
| Suse | docker | rpm | linux micro 6.1 | 27.5.1_ce-slfo.1.1_3.1 | Not reported | SUSE-SU-2025:20393-1 | Not reported |
| Suse | docker | rpm | linux micro 6.0 | 27.5.1_ce-3.1 | Not reported | SUSE-SU-2025:20377-1 | Not reported |
| Suse | ignition | rpm | linux enterprise micro 5.1 | 2.14.0-150300.4.13.1 | Not reported | SUSE-SU-2025:02035-1 | Not reported |
| Suse | ignition | rpm | linux enterprise micro 5.4 | 2.15.0-150400.4.11.1 | Not reported | SUSE-SU-2025:02041-1 | Not reported |
| Suse | ignition | rpm | linux micro 6.0 | 2.19.0-2.1 | Not reported | SUSE-SU-2025:20515-1 | Not reported |
| Suse | ignition | rpm | linux enterprise micro 5.2 | 2.14.0-150300.6.13.1 | Not reported | SUSE-SU-2025:02040-1 | Not reported |
| Suse | ignition | rpm | linux enterprise micro 5.3 | 2.14.0-150400.4.9.1 | Not reported | SUSE-SU-2025:02046-1 | Not reported |
| Opensuse | teleport | rpm | tumbleweed | 17.2.9-1.1 | Not reported | OPENSUSE-SU-2025:14839-1 | Not reported |
| Opensuse | google-osconfig-agent | rpm | tumbleweed | 20250115.01-3.1 | Not reported | OPENSUSE-SU-2025:14870-1 | Not reported |
| Opensuse | google-guest-agent | rpm | tumbleweed | 20250116.00-3.1 | Not reported | OPENSUSE-SU-2025:14869-1 | Not reported |
| Suse | restic | rpm | package hub 15 sp6 | 0.17.3-bp156.2.3.1 | Not reported | OPENSUSE-SU-2025:0091-1 | Not reported |
| Opensuse | restic | rpm | leap 15.6 | 0.17.3-bp156.2.3.1 | Not reported | OPENSUSE-SU-2025:0091-1 | Not reported |
| Suse | ignition | rpm | linux enterprise module for hpc 15 sp6 | 2.14.0-150400.9.9.1 | Not reported | SUSE-SU-2025:02014-1 | Not reported |
| Suse | ignition | rpm | linux enterprise module for hpc 15 sp7 | 2.14.0-150400.9.9.1 | Not reported | SUSE-SU-2025:02014-1 | Not reported |
| Opensuse | ignition | rpm | leap 15.6 | 2.14.0-150400.9.9.1 | Not reported | SUSE-SU-2025:02014-1 | Not reported |
| Opensuse | docker-stable | rpm | tumbleweed | 24.0.9_ce-8.1 | Not reported | OPENSUSE-SU-2025:14923-1 | Not reported |
| Suse | google-guest-agent | rpm | linux enterprise module for public cloud 12 | 20250116.00-1.47.2 | Not reported | SUSE-SU-2025:0872-1 | Not reported |
| Suse | ignition | rpm | linux enterprise micro 5.5 | 2.17.0-150500.3.12.1 | Not reported | SUSE-SU-2025:02097-1 | Not reported |
| Opensuse | govulncheck-vulndb | rpm | tumbleweed | 0.0.20250226T025151-1.1 | Not reported | OPENSUSE-SU-2025:14843-1 | Not reported |
| Opensuse | cadvisor | rpm | tumbleweed | 0.52.1-1.1 | Not reported | OPENSUSE-SU-2025:14904-1 | Not reported |
| Suse | google-guest-agent | rpm | linux enterprise micro 5.5 | 20250116.00-150000.1.57.1 | Not reported | SUSE-SU-2025:1005-1 | Not reported |
| Suse | google-guest-agent | rpm | linux enterprise module for public cloud 15 sp3 | 20250116.00-150000.1.57.1 | Not reported | SUSE-SU-2025:1005-1 | Not reported |
| Suse | google-guest-agent | rpm | linux enterprise module for public cloud 15 sp4 | 20250116.00-150000.1.57.1 | Not reported | SUSE-SU-2025:1005-1 | Not reported |
| Suse | google-guest-agent | rpm | linux enterprise module for public cloud 15 sp5 | 20250116.00-150000.1.57.1 | Not reported | SUSE-SU-2025:1005-1 | Not reported |
| Suse | google-guest-agent | rpm | linux enterprise module for public cloud 15 sp6 | 20250116.00-150000.1.57.1 | Not reported | SUSE-SU-2025:1005-1 | Not reported |
| Opensuse | google-guest-agent | rpm | leap 15.6 | 20250116.00-150000.1.57.1 | Not reported | SUSE-SU-2025:1005-1 | Not reported |
| Opensuse | fake-gcs-server | rpm | tumbleweed | 1.52.2-1.1 | Not reported | OPENSUSE-SU-2025:14868-1 | Not reported |
| Suse | google-cloud-sap-agent | rpm | linux enterprise module for public cloud 12 | 3.6-6.43.1 | Not reported | SUSE-SU-2025:0881-1 | Not reported |
| Opensuse | restic | rpm | tumbleweed | 0.17.3-2.1 | Not reported | OPENSUSE-SU-2025:14874-1 | Not reported |
| Opensuse | go-containerregistry | rpm | tumbleweed | 0.20.3-2.1 | Not reported | OPENSUSE-SU-2025:14905-1 | Not reported |
| Suse | google-osconfig-agent | rpm | linux enterprise micro 5.5 | 20250115.01-150000.1.47.1 | Not reported | SUSE-SU-2025:1006-1 | Not reported |
| Suse | google-osconfig-agent | rpm | linux enterprise module for public cloud 15 sp3 | 20250115.01-150000.1.47.1 | Not reported | SUSE-SU-2025:1006-1 | Not reported |
| Suse | google-osconfig-agent | rpm | linux enterprise module for public cloud 15 sp4 | 20250115.01-150000.1.47.1 | Not reported | SUSE-SU-2025:1006-1 | Not reported |
| Suse | google-osconfig-agent | rpm | linux enterprise module for public cloud 15 sp5 | 20250115.01-150000.1.47.1 | Not reported | SUSE-SU-2025:1006-1 | Not reported |
| Suse | google-osconfig-agent | rpm | linux enterprise module for public cloud 15 sp6 | 20250115.01-150000.1.47.1 | Not reported | SUSE-SU-2025:1006-1 | Not reported |
| Opensuse | google-osconfig-agent | rpm | leap 15.6 | 20250115.01-150000.1.47.1 | Not reported | SUSE-SU-2025:1006-1 | Not reported |
| Suse | google-osconfig-agent | rpm | linux enterprise module for public cloud 12 | 20250115.01-1.38.1 | Not reported | SUSE-SU-2025:0852-1 | Not reported |
| Suse | google-cloud-sap-agent | rpm | linux enterprise module for public cloud 15 sp3 | 3.6-150100.3.44.1 | Not reported | SUSE-SU-2025:0882-1 | Not reported |
| Suse | google-cloud-sap-agent | rpm | linux enterprise module for public cloud 15 sp4 | 3.6-150100.3.44.1 | Not reported | SUSE-SU-2025:0882-1 | Not reported |
| Suse | google-cloud-sap-agent | rpm | linux enterprise module for public cloud 15 sp5 | 3.6-150100.3.44.1 | Not reported | SUSE-SU-2025:0882-1 | Not reported |
| Suse | google-cloud-sap-agent | rpm | linux enterprise module for public cloud 15 sp6 | 3.6-150100.3.44.1 | Not reported | SUSE-SU-2025:0882-1 | Not reported |
| Opensuse | google-cloud-sap-agent | rpm | leap 15.6 | 3.6-150100.3.44.1 | Not reported | SUSE-SU-2025:0882-1 | Not reported |
Notes
[bookworm] golang-golang-x-oauth2: Minor issue
OpenFactory catalog packages
[Debian 12 (Bookworm)]
- [golang-golang-x-oauth2-dev]Affected
Source package: [golang-golang-x-oauth2]
Details (4)
0.3.0-1· all · bookwormAffected
dsa · golang-golang-x-oauth2 · debian · bookworm; dsa · golang-golang-x-oauth2 · debian · 12
0.3.0-1· all · bookwormAffected
dsa · golang-golang-x-oauth2 · debian · bookworm; dsa · golang-golang-x-oauth2 · debian · 12
0.15.0-1~bpo12+1· all · bookworm-backportsAffected
dsa · golang-golang-x-oauth2 · debian · bookworm; dsa · golang-golang-x-oauth2 · debian · 12
0.15.0-1~bpo12+1· all · bookworm-backportsAffected
dsa · golang-golang-x-oauth2 · debian · bookworm; dsa · golang-golang-x-oauth2 · debian · 12
- [golang-golang-x-oauth2-google-dev]Affected
Source package: [golang-golang-x-oauth2]
Details (4)
0.3.0-1· all · bookwormAffected
dsa · golang-golang-x-oauth2 · debian · bookworm; dsa · golang-golang-x-oauth2 · debian · 12
0.3.0-1· all · bookwormAffected
dsa · golang-golang-x-oauth2 · debian · bookworm; dsa · golang-golang-x-oauth2 · debian · 12
0.15.0-1~bpo12+1· all · bookworm-backportsAffected
dsa · golang-golang-x-oauth2 · debian · bookworm; dsa · golang-golang-x-oauth2 · debian · 12
0.15.0-1~bpo12+1· all · bookworm-backportsAffected
dsa · golang-golang-x-oauth2 · debian · bookworm; dsa · golang-golang-x-oauth2 · debian · 12
[openSUSE Tumbleweed]
- [crane]Unknown
Source package: [go-containerregistry]
Details (1)
0.22.0-1.1· x86_64 · tumbleweedUnknown · Fixed:
0.20.3-2.1Version impact unknown
dsa · go-containerregistry · opensuse · tumbleweed
- [crane-bash-completion]Unknown
Source package: [go-containerregistry]
Details (1)
0.22.0-1.1· noarch · tumbleweedUnknown · Fixed:
0.20.3-2.1Version impact unknown
dsa · go-containerregistry · opensuse · tumbleweed
- [crane-fish-completion]Unknown
Source package: [go-containerregistry]
Details (1)
0.22.0-1.1· noarch · tumbleweedUnknown · Fixed:
0.20.3-2.1Version impact unknown
dsa · go-containerregistry · opensuse · tumbleweed
- [crane-zsh-completion]Unknown
Source package: [go-containerregistry]
Details (1)
0.22.0-1.1· noarch · tumbleweedUnknown · Fixed:
0.20.3-2.1Version impact unknown
dsa · go-containerregistry · opensuse · tumbleweed
- [docker-stable-bash-completion]Unknown
Source package: [docker-stable]
Details (1)
24.0.9_ce-19.3· noarch · tumbleweedUnknown · Fixed:
24.0.9_ce-8.1Version impact unknown
dsa · docker-stable · opensuse · tumbleweed
- [docker-stable-buildx]Unknown
Source package: [docker-stable]
Details (1)
0.25.0-19.3· x86_64 · tumbleweedUnknown · Fixed:
24.0.9_ce-8.1Version impact unknown
dsa · docker-stable · opensuse · tumbleweed
- [docker-stable-fish-completion]Unknown
Source package: [docker-stable]
Details (1)
24.0.9_ce-19.3· noarch · tumbleweedUnknown · Fixed:
24.0.9_ce-8.1Version impact unknown
dsa · docker-stable · opensuse · tumbleweed
- [docker-stable-rootless-extras]Unknown
Source package: [docker-stable]
Details (1)
24.0.9_ce-19.3· noarch · tumbleweedUnknown · Fixed:
24.0.9_ce-8.1Version impact unknown
dsa · docker-stable · opensuse · tumbleweed
- [docker-stable-zsh-completion]Unknown
Source package: [docker-stable]
Details (1)
24.0.9_ce-19.3· noarch · tumbleweedUnknown · Fixed:
24.0.9_ce-8.1Version impact unknown
dsa · docker-stable · opensuse · tumbleweed
- [gcrane]Unknown
Source package: [go-containerregistry]
Details (1)
0.22.0-1.1· x86_64 · tumbleweedUnknown · Fixed:
0.20.3-2.1Version impact unknown
dsa · go-containerregistry · opensuse · tumbleweed
- [gcrane-bash-completion]Unknown
Source package: [go-containerregistry]
Details (1)
0.22.0-1.1· noarch · tumbleweedUnknown · Fixed:
0.20.3-2.1Version impact unknown
dsa · go-containerregistry · opensuse · tumbleweed
- [gcrane-fish-completion]Unknown
Source package: [go-containerregistry]
Details (1)
0.22.0-1.1· noarch · tumbleweedUnknown · Fixed:
0.20.3-2.1Version impact unknown
dsa · go-containerregistry · opensuse · tumbleweed
- [gcrane-zsh-completion]Unknown
Source package: [go-containerregistry]
Details (1)
0.22.0-1.1· noarch · tumbleweedUnknown · Fixed:
0.20.3-2.1Version impact unknown
dsa · go-containerregistry · opensuse · tumbleweed
- [pluto-bash-completion]Unknown
Source package: [pluto]
Details (1)
5.24.3-1.1· noarch · tumbleweedUnknown · Fixed:
5.21.7-1.1Version impact unknown
dsa · pluto · opensuse · tumbleweed
- [pluto-fish-completion]Unknown
Source package: [pluto]
Details (1)
5.24.3-1.1· noarch · tumbleweedUnknown · Fixed:
5.21.7-1.1Version impact unknown
dsa · pluto · opensuse · tumbleweed
- [pluto-zsh-completion]Unknown
Source package: [pluto]
Details (1)
5.24.3-1.1· noarch · tumbleweedUnknown · Fixed:
5.21.7-1.1Version impact unknown
dsa · pluto · opensuse · tumbleweed
- [restic-bash-completion]Unknown
Source package: [restic]
Details (1)
0.19.1-1.2· noarch · tumbleweedUnknown · Fixed:
0.17.3-2.1Version impact unknown
dsa · restic · opensuse · tumbleweed
- [restic-zsh-completion]Unknown
Source package: [restic]
Details (1)
0.19.1-1.2· noarch · tumbleweedUnknown · Fixed:
0.17.3-2.1Version impact unknown
dsa · restic · opensuse · tumbleweed
Observed:
References
- [https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_21265-1.json]
- [https://osv.dev/vulnerability/DEBIAN-CVE-2025-22868]
- [https://osv.dev/vulnerability/GHSA-6v2p-p543-phr9]
- [https://osv.dev/vulnerability/SUSE-SU-2025:02014-1]
- [https://osv.dev/vulnerability/SUSE-SU-2025:02035-1]
- [https://osv.dev/vulnerability/SUSE-SU-2025:02040-1]
- [https://osv.dev/vulnerability/SUSE-SU-2025:02041-1]
- [https://osv.dev/vulnerability/SUSE-SU-2025:02046-1]
- [https://osv.dev/vulnerability/SUSE-SU-2025:02097-1]
- [https://osv.dev/vulnerability/SUSE-SU-2025:0852-1]
- [https://osv.dev/vulnerability/SUSE-SU-2025:0872-1]
- [https://osv.dev/vulnerability/SUSE-SU-2025:0881-1]
- [https://osv.dev/vulnerability/SUSE-SU-2025:0882-1]
- [https://osv.dev/vulnerability/SUSE-SU-2025:1005-1]
- [https://osv.dev/vulnerability/SUSE-SU-2025:1006-1]
- [https://osv.dev/vulnerability/SUSE-SU-2025:20377-1]
- [https://osv.dev/vulnerability/SUSE-SU-2025:20393-1]
- [https://osv.dev/vulnerability/SUSE-SU-2025:20515-1]
- [https://osv.dev/vulnerability/SUSE-SU-2026:22128-1]
- [https://osv.dev/vulnerability/SUSE-SU-2026:22133-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2025:0091-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2025:14839-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2025:14843-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2025:14868-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2025:14869-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2025:14870-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2025:14874-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2025:14904-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2025:14905-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2025:14923-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2025:15184-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2025:15454-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2026:20969-1]
- [https://security-tracker.debian.org/tracker/CVE-2025-22868]
- [https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-22868.json]
- [https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-0512.json]
[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]