CVE catalog

CVE-2025-3757

govulncheck-vulndb-0.0.20250515T200012-1.1 on GA media

[CVE catalog]

Severity
Critical · CVSS 9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Published
Updated
Source
[NVD] · [CVE record]
EPSS
0.43% · Oct 25, 2026

Versions of OpenPubkey library prior to 0.10.0 contained a vulnerability that would allow a specially crafted JWS to bypass signature verification.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debiangolang-github-openpubkey-openpubkey130.18.0-1vulnerable
Debiangolang-github-openpubkey-openpubkey130.21.0-1vulnerable
Debiangolang-github-openpubkey-openpubkey130.21.0-1~exp0vulnerable
Debiangolang-github-openpubkey-openpubkey130.21.0-2vulnerable
Debiangolang-github-openpubkey-openpubkey130.22.0-1vulnerable
Debiangolang-github-openpubkey-openpubkey130.23.0-1vulnerable
Debiangolang-github-openpubkey-openpubkey130.26.0-1vulnerable
Debiangolang-github-openpubkey-openpubkey130.8.0-1vulnerable
Debiangolang-github-openpubkey-openpubkey140.8.0-1vulnerable
Debiangolang-github-openpubkey-openpubkey140.18.0-1fixed
Opensusegovulncheck-vulndbtumbleweed0.0.20250515T200012-1.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debiangolang-github-openpubkey-openpubkeydeb140.18.0-1Not reportedDEBIAN-CVE-2025-3757Not reported
Opensusegovulncheck-vulndbrpmtumbleweed0.0.20250515T200012-1.1Not reportedOPENSUSE-SU-2025:15135-1Not reported

OpenFactory catalog packages

[Debian 13 (Trixie)]

[openSUSE Tumbleweed]

  • [govulncheck-vulndb]Fixed

    Source package: [govulncheck-vulndb]

    Details (1)

    • 0.0.20260828T144745-1.1 · noarch · tumbleweed

      Fixed · Fixed: 0.0.20250515T200012-1.1

      pypi · govulncheck-vulndb · opensuse · tumbleweed

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]