AZL-60545 CVE-2025-22872 affecting package cf-cli for versions less than 8.7.11-3

The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character / as self-closing. When directly using Tokenizer, this can result in such tags incorrectly being marked as self-closing, and when using the Parse functions, this can result in content...

@aws-amplify/amplify-app (>=5.0.39-beta-latest.0, <=5.0.42), @aws-amplify/amplify-appsync-simulator (>=2.16.10-beta-latest.0, <=2.16.12) +67 more potentially affected by unknown CVE via aws-cdk-lib (>=2.172.0, <=2.189.0)

aws-cdk-lib NPM version =2.172.0, =5.0.39-beta-latest.0, =2.16.10-beta-latest.0, =5.0.38-beta-latest.0, =3.7.18-beta-latest.0, =3.1.26-beta-latest.0, =5.7.12-beta-latest.0, =3.5.18-beta-latest.0, =3.5.39-beta-latest.0, =5.1.31-beta-latest.0, =2.26.28-beta-latest.0, =5.5.18-beta-latest.0,...

CVE-2025-3622

A vulnerability, which was classified as critical, has been found in Xorbits Inference up to 1.4.1. This issue affects the function load of the file xinference/thirdparty/cosyvoice/cli/model.py. The manipulation leads to deserialization...

OPENSUSE-SU-2025:14997-1 oci-cli-3.54.1-1.1 on GA media

These are all security issues fixed in the oci-cli-3.54.1-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2025-16292

Name of the Vulnerable Software and Affected Versions Xorbits Inference versions up to 1.4.1 Description A critical vulnerability has been found in Xorbits Inference, affecting the function load of the file xinference/thirdparty/cosyvoice/cli/model.py. The manipulation leads to deserialization...

CVE-2025-3622: Deserialization of Untrusted Data

A vulnerability, which was classified as critical, has been found in Xorbits Inference up to 1.4.1. This issue affects the function load of the file xinference/thirdparty/cosyvoice/cli/model.py. The manipulation leads to deserialization...

com.sap.cloud.yaas.rammler:rammler-core (>=1.4.1, <=1.4.2), com.sap.cloud.yaas.service-generator:service-generator-java-jersey (>=2.1.1, <=2.1.2) +6 more potentially affected by CVE-2025-3588 via org.jsonschema2pojo:jsonschema2pojo-core (0.4.13)

org.jsonschema2pojo:jsonschema2pojo-core MAVEN version 0.4.13 is affected by a known vulnerability. The following packages have a transitive dependency on org.jsonschema2pojo:jsonschema2pojo-core and may be impacted: - com.sap.cloud.yaas.rammler:rammler-core =1.4.1, =2.1.1, =2.1.1, =2.1.1, =4.3.4...

org.jsonschema2pojo:jsonschema2pojo-ant (0.4.8), org.jsonschema2pojo:jsonschema2pojo-cli (0.4.8) +3 more potentially affected by CVE-2025-3588 via org.jsonschema2pojo:jsonschema2pojo-core (0.4.8)

org.jsonschema2pojo:jsonschema2pojo-core MAVEN version 0.4.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.jsonschema2pojo:jsonschema2pojo-core and may be impacted: - org.jsonschema2pojo:jsonschema2pojo-ant 0.4.8 -...

org.jsonschema2pojo:jsonschema2pojo-ant (0.4.1), org.jsonschema2pojo:jsonschema2pojo-cli (0.4.1) +1 more potentially affected by CVE-2025-3588 via org.jsonschema2pojo:jsonschema2pojo-core (0.4.1)

org.jsonschema2pojo:jsonschema2pojo-core MAVEN version 0.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jsonschema2pojo:jsonschema2pojo-core and may be impacted: - org.jsonschema2pojo:jsonschema2pojo-ant 0.4.1 -...

io.fabric8:swagger-annotator (2.2.184), org.jsonschema2pojo:jsonschema2pojo-ant (0.4.28) +2 more potentially affected by CVE-2025-3588 via org.jsonschema2pojo:jsonschema2pojo-core (0.4.28)

org.jsonschema2pojo:jsonschema2pojo-core MAVEN version 0.4.28 is affected by a known vulnerability. The following packages have a transitive dependency on org.jsonschema2pojo:jsonschema2pojo-core and may be impacted: - io.fabric8:swagger-annotator 2.2.184 - org.jsonschema2pojo:jsonschema2pojo-ant...

org.jsonschema2pojo:jsonschema2pojo-ant (0.4.36), org.jsonschema2pojo:jsonschema2pojo-cli (0.4.36) +1 more potentially affected by CVE-2025-3588 via org.jsonschema2pojo:jsonschema2pojo-core (0.4.36)

org.jsonschema2pojo:jsonschema2pojo-core MAVEN version 0.4.36 is affected by a known vulnerability. The following packages have a transitive dependency on org.jsonschema2pojo:jsonschema2pojo-core and may be impacted: - org.jsonschema2pojo:jsonschema2pojo-ant 0.4.36 -...

org.jsonschema2pojo:jsonschema2pojo-ant (0.4.32), org.jsonschema2pojo:jsonschema2pojo-cli (0.4.32) +1 more potentially affected by CVE-2025-3588 via org.jsonschema2pojo:jsonschema2pojo-core (0.4.32)

org.jsonschema2pojo:jsonschema2pojo-core MAVEN version 0.4.32 is affected by a known vulnerability. The following packages have a transitive dependency on org.jsonschema2pojo:jsonschema2pojo-core and may be impacted: - org.jsonschema2pojo:jsonschema2pojo-ant 0.4.32 -...

org.jsonschema2pojo:jsonschema2pojo-ant (0.5.0), org.jsonschema2pojo:jsonschema2pojo-cli (0.5.0) +1 more potentially affected by CVE-2025-3588 via org.jsonschema2pojo:jsonschema2pojo-core (0.5.0)

org.jsonschema2pojo:jsonschema2pojo-core MAVEN version 0.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jsonschema2pojo:jsonschema2pojo-core and may be impacted: - org.jsonschema2pojo:jsonschema2pojo-ant 0.5.0 -...

io.fabric8:swagger-annotator (>=2.2.145, <=2.2.156), org.jsonschema2pojo:jsonschema2pojo-ant (0.4.24) +2 more potentially affected by CVE-2025-3588 via org.jsonschema2pojo:jsonschema2pojo-core (0.4.24)

org.jsonschema2pojo:jsonschema2pojo-core MAVEN version 0.4.24 is affected by a known vulnerability. The following packages have a transitive dependency on org.jsonschema2pojo:jsonschema2pojo-core and may be impacted: - io.fabric8:swagger-annotator =2.2.145, =2.2.156 -...

com.sap.cloud.yaas.rammler:rammler-core (>=1.5.0, <=1.7.0), com.sap.cloud.yaas.service-generator:service-generator-java-jersey (>=2.2.0, <=2.2.3) +10 more potentially affected by CVE-2025-3588 via org.jsonschema2pojo:jsonschema2pojo-core (0.4.16)

org.jsonschema2pojo:jsonschema2pojo-core MAVEN version 0.4.16 is affected by a known vulnerability. The following packages have a transitive dependency on org.jsonschema2pojo:jsonschema2pojo-core and may be impacted: - com.sap.cloud.yaas.rammler:rammler-core =1.5.0, =2.2.0, =2.2.0, =2.2.0, =4.6.1...

org.jsonschema2pojo:jsonschema2pojo-ant (0.4.5), org.jsonschema2pojo:jsonschema2pojo-cli (0.4.5) +3 more potentially affected by CVE-2025-3588 via org.jsonschema2pojo:jsonschema2pojo-core (0.4.5)

org.jsonschema2pojo:jsonschema2pojo-core MAVEN version 0.4.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.jsonschema2pojo:jsonschema2pojo-core and may be impacted: - org.jsonschema2pojo:jsonschema2pojo-ant 0.4.5 -...

org.jsonschema2pojo:jsonschema2pojo-ant (0.4.12), org.jsonschema2pojo:jsonschema2pojo-cli (0.4.12) +1 more potentially affected by CVE-2025-3588 via org.jsonschema2pojo:jsonschema2pojo-core (0.4.12)

org.jsonschema2pojo:jsonschema2pojo-core MAVEN version 0.4.12 is affected by a known vulnerability. The following packages have a transitive dependency on org.jsonschema2pojo:jsonschema2pojo-core and may be impacted: - org.jsonschema2pojo:jsonschema2pojo-ant 0.4.12 -...

org.jsonschema2pojo:jsonschema2pojo-ant (0.4.2), org.jsonschema2pojo:jsonschema2pojo-cli (0.4.2) +1 more potentially affected by CVE-2025-3588 via org.jsonschema2pojo:jsonschema2pojo-core (0.4.2)

org.jsonschema2pojo:jsonschema2pojo-core MAVEN version 0.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jsonschema2pojo:jsonschema2pojo-core and may be impacted: - org.jsonschema2pojo:jsonschema2pojo-ant 0.4.2 -...

org.jsonschema2pojo:jsonschema2pojo-ant (0.4.25), org.jsonschema2pojo:jsonschema2pojo-cli (0.4.25) +1 more potentially affected by CVE-2025-3588 via org.jsonschema2pojo:jsonschema2pojo-core (0.4.25)

org.jsonschema2pojo:jsonschema2pojo-core MAVEN version 0.4.25 is affected by a known vulnerability. The following packages have a transitive dependency on org.jsonschema2pojo:jsonschema2pojo-core and may be impacted: - org.jsonschema2pojo:jsonschema2pojo-ant 0.4.25 -...

org.jsonschema2pojo:jsonschema2pojo-ant (0.4.9), org.jsonschema2pojo:jsonschema2pojo-cli (0.4.9) +1 more potentially affected by CVE-2025-3588 via org.jsonschema2pojo:jsonschema2pojo-core (0.4.9)

org.jsonschema2pojo:jsonschema2pojo-core MAVEN version 0.4.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.jsonschema2pojo:jsonschema2pojo-core and may be impacted: - org.jsonschema2pojo:jsonschema2pojo-ant 0.4.9 -...