ai.tock:bot-test (>=25.9.0 <=26.3.2), ai.tock:bot-test-base (>=25.9.0 <=26.3.2) +286 more potentially affected by CVE-2025-11965 via io.vertx:vertx-web (>=5.0.0.CR1 <=5.0.4)

🗓️ 22 Oct 2025 19:38:04Reported by Vulners OSVType

vulnersosv

vulnersosv🔗 security.snyk.io👁 6 Views

io.vertx:vertx-web 5.0.0.CR1–5.0.4 vulnerable to CVE-2025-11965; affects ai.tock packages.

Reporter	Title	Published	Views	Family All 35
IBM Security Bulletins	Security Bulletin: IBM Automation Decision Services for May 2026- Multiple CVEs addressed	9 Jun 202605:21	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM watsonx Orchestrate with watsonx Assistant Cartridge	26 Feb 202610:04	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Guardium Data Protection is affected by multiple vulnerabilities	29 Apr 202611:04	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Event Processing is vulnerable to unauthorized access to hidden files and stored cross-site scripting (XSS) (CVE-2025-11965, CVE-2025-11966)	4 Mar 202615:44	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Event Endpoint Management is vulnerable to unauthorized access	4 Mar 202605:50	–	ibm
Chainguard	CVE-2025-11965 vulnerabilities	24 Oct 202514:05	–	cgr
Circl	CVE-2025-11965	16 Jan 202621:11	–	circl
CNNVD	Eclipse Vert.x 安全漏洞	22 Oct 202500:00	–	cnnvd
CVE	CVE-2025-11965	22 Oct 202514:50	–	cve
Cvelist	CVE-2025-11965	22 Oct 202514:50	–	cvelist

17 Jan 2026 02:06Current

5.7Medium risk

Vulners AI Score5.7

CVSS 3.17.5

CVSS 46.3

EPSS0.00469

SSVC

vertx web ai tock packages transitive dependency