{"schemaVersion":3,"id":"CVE-2025-11966","aliases":["CGA-456c-gp6f-r6c2","CGA-459r-gr4w-xgmg","CGA-4hm3-wj48-jgwr","CGA-55mj-j6px-hvqw","CGA-6fg3-6p74-h769","CGA-6hhv-pr8p-622v","CGA-72gj-434w-3mpp","CGA-8wj7-4hpj-53pg","CGA-9c8h-mrc2-cjhr","CGA-9prv-83h3-4rjj","CGA-cg74-24m5-qcjv","CGA-fhx2-36m8-g8cc","CGA-fvm5-jwjx-xcpv","CGA-gwr2-h44v-jxhf","CGA-hvjr-jgpf-c5mh","CGA-j924-fjrw-r9xq","CGA-jc9x-4j3j-2vqp","CGA-m75q-xjrv-786v","CGA-mxxq-323v-2x66","CGA-p86p-vfc9-68qp","CGA-p96w-p3r7-x8cv","CGA-ph9q-j72j-qc29","CGA-pvgp-ff27-mpgm","CGA-q67p-8wj3-v3p5","CGA-qrq8-gph5-m62v","CGA-qvpf-v39r-7r67","CGA-r3f5-v9gm-v3v4","CGA-rgch-m64p-2q2p","CGA-v4jh-xpww-pfq8","CGA-v523-r386-7mg7","CGA-v55x-vr5h-6qhp","CGA-vcrr-g352-xhfh","CGA-vgh2-pwg4-fcx3","CGA-wcf6-4x7x-frp6","CGA-3gf3-65mc-vp8c","CGA-3hvm-xh85-w2c9","CGA-4fv4-9849-9c53","CGA-6285-7f3g-5889","CGA-68xv-qx94-7qxv","CGA-6h4p-45qj-28h6","CGA-72x8-ff43-cwm5","CGA-76m3-6qmx-cfp6","CGA-77cw-v5mg-42rf","CGA-79m2-4xm9-fp47","CGA-c2pp-h7qr-3vg9","CGA-f45x-wc4f-7r43","CGA-ffvr-2v3r-jcfr","CGA-hxp2-jfm2-xm6r","CGA-pvfg-5rpg-8h7p","GHSA-45p5-v273-3qqr","CGA-qwq4-5xv3-9qmm"],"status":"published","duplicateOf":null,"title":null,"description":"In Eclipse Vert.x versions [4.0.0, 4.5.21] and [5.0.0, 5.0.4], when \"directory listing\" is enabled, file and directory names are inserted into generated HTML without proper escaping in the href, title, and link attributes. An attacker who can create or rename files or directories within a served path can craft filenames containing malicious script or HTML content, leading to stored cross-site scripting (XSS) that executes in the context of users viewing the affected directory listing.","dates":{"published":"2025-10-22T14:44:24.145Z","modified":"2025-10-22T15:26:41.527Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":6.4,"severity":"medium","version":"3.1","versionLabel":"v3.1","source":"NVD","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"4.0","versionLabel":"v4.0","source":"CVE.org","score":2.3,"severity":"low","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N","exploitability":null,"impact":null,"computed":false},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Wolfi","score":2.3,"severity":"low","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N","exploitability":null,"impact":null,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Chainguard","score":2.3,"severity":"low","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N","exploitability":null,"impact":null,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Maven","score":2.3,"severity":"low","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N","exploitability":null,"impact":null,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Maven","score":4.9,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N","exploitability":4.6,"impact":4.5,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"NVD","score":2.3,"severity":"low","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":6.4,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00291,"percentile":0.20389,"severity":"low","asOf":"2026-10-20T00:00:00.000Z","change":{"pp":0.01899999999999996,"baselineDate":"2026-09-20T00:00:00.000Z","baselineScore":0.00272},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00272,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00272,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00272,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00272,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00272,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00272,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00272,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00272,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00291,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00291,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00291,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00291,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00291,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00291,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00291,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00291,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00291,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00291,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00291,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00291,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00291,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00291,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00291,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00291,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00291,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00291,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00291,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00291,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00291,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00291,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00291,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00291,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00291,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00291,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00291,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00291,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00291,"percentile":0.20389}],"last30":[{"date":"2026-09-20T00:00:00.000Z","score":0.00272,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00272,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00291,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00291,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00291,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00291,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00291,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00291,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00291,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00291,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00291,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00291,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00291,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00291,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00291,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00291,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00291,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00291,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00291,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00291,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00291,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00291,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00291,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00291,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00291,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00291,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00291,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00291,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00291,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00291,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00291,"percentile":0.20389}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[{"id":"REF_BBAF0F337030A8FC","name":"Exploit Reference (gitlab.eclipse.org)","source":"reference","url":"https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/303","maturity":"unknown","reliabilityScore":0.2,"verified":false,"type":null,"platforms":[],"requiresAuth":null,"exploitdb":null,"metasploit":null}],"exploitCount":1,"weaknesses":[{"id":"CWE-79","name":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","description":"The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.","type":"weakness","status":"Stable","abstraction":"Base","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/79.html"},{"id":"CWE-80","name":"Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)","description":"The product receives input from an upstream component, but it does not neutralize or incorrectly neutralizes special characters such as \"<\", \">\", and \"&\" that could be interpreted as web-scripting elements when they are sent to a downstream component that processes web pages.","type":"weakness","status":"Incomplete","abstraction":"Variant","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/80.html"}],"affected":[{"vendor":"chainguard","product":"apache-pulsar","name":"apache-pulsar","label":"apache-pulsar","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/apache-pulsar","purlType":"apk","versions":[{"text":"< 4.1.1-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.1.1-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"apache-pulsar-compat","name":"apache-pulsar-compat","label":"apache-pulsar-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/apache-pulsar-compat","purlType":"apk","versions":[{"text":"< 4.1.1-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.1.1-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kafka_exporter-strimzi-compat","name":"kafka_exporter-strimzi-compat","label":"kafka_exporter-strimzi-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kafka_exporter-strimzi-compat","purlType":"apk","versions":[{"text":"< 0.48.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.48.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kafka-strimzi-compat","name":"kafka-strimzi-compat","label":"kafka-strimzi-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kafka-strimzi-compat","purlType":"apk","versions":[{"text":"< 0.48.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.48.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"keycloak-26.2","name":"keycloak-26.2","label":"keycloak-26.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/keycloak-26.2","purlType":"apk","versions":[{"text":"< 26.2.5-r6","noFixRecorded":false,"fixedIn":null},{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"< 26.2.5-r6 | All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"keycloak-26.2-iamguarded-compat","name":"keycloak-26.2-iamguarded-compat","label":"keycloak-26.2-iamguarded-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/keycloak-26.2-iamguarded-compat","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"keycloak-26.3-iamguarded-compat","name":"keycloak-26.3-iamguarded-compat","label":"keycloak-26.3-iamguarded-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/keycloak-26.3-iamguarded-compat","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"keycloak-26.4","name":"keycloak-26.4","label":"keycloak-26.4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/keycloak-26.4","purlType":"apk","versions":[{"text":"< 26.4.7-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 26.4.7-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"keycloak-26.4-iamguarded-compat","name":"keycloak-26.4-iamguarded-compat","label":"keycloak-26.4-iamguarded-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/keycloak-26.4-iamguarded-compat","purlType":"apk","versions":[{"text":"< 26.4.7-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 26.4.7-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"keycloak-fips-26.2-iamguarded-fips","name":"keycloak-fips-26.2-iamguarded-fips","label":"keycloak-fips-26.2-iamguarded-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/keycloak-fips-26.2-iamguarded-fips","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"keycloak-fips-26.3-iamguarded-fips","name":"keycloak-fips-26.3-iamguarded-fips","label":"keycloak-fips-26.3-iamguarded-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/keycloak-fips-26.3-iamguarded-fips","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"keycloak-fips-26.4","name":"keycloak-fips-26.4","label":"keycloak-fips-26.4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/keycloak-fips-26.4","purlType":"apk","versions":[{"text":"< 26.4.7-r10","noFixRecorded":false,"fixedIn":null},{"text":"< 26.4.7-r12","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 26.4.7-r10 | < 26.4.7-r12","eol":null,"hubHref":null},{"vendor":"chainguard","product":"keycloak-fips-26.4-iamguarded-fips","name":"keycloak-fips-26.4-iamguarded-fips","label":"keycloak-fips-26.4-iamguarded-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/keycloak-fips-26.4-iamguarded-fips","purlType":"apk","versions":[{"text":"< 26.4.7-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 26.4.7-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"prometheus-jmx-exporter-strimzi-compat","name":"prometheus-jmx-exporter-strimzi-compat","label":"prometheus-jmx-exporter-strimzi-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/prometheus-jmx-exporter-strimzi-compat","purlType":"apk","versions":[{"text":"< 0.48.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.48.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"strimzi-kafka-operator","name":"strimzi-kafka-operator","label":"strimzi-kafka-operator","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/strimzi-kafka-operator","purlType":"apk","versions":[{"text":"< 0.48.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.48.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"strimzi-kafka-operator-cluster-operator","name":"strimzi-kafka-operator-cluster-operator","label":"strimzi-kafka-operator-cluster-operator","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/strimzi-kafka-operator-cluster-operator","purlType":"apk","versions":[{"text":"< 0.48.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.48.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"strimzi-kafka-operator-kafka-agent","name":"strimzi-kafka-operator-kafka-agent","label":"strimzi-kafka-operator-kafka-agent","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/strimzi-kafka-operator-kafka-agent","purlType":"apk","versions":[{"text":"< 0.48.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.48.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"strimzi-kafka-operator-kafka-base","name":"strimzi-kafka-operator-kafka-base","label":"strimzi-kafka-operator-kafka-base","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/strimzi-kafka-operator-kafka-base","purlType":"apk","versions":[{"text":"< 0.48.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.48.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"strimzi-kafka-operator-kafka-init","name":"strimzi-kafka-operator-kafka-init","label":"strimzi-kafka-operator-kafka-init","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/strimzi-kafka-operator-kafka-init","purlType":"apk","versions":[{"text":"< 0.48.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.48.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"strimzi-kafka-operator-kafka-thirdparty-libs","name":"strimzi-kafka-operator-kafka-thirdparty-libs","label":"strimzi-kafka-operator-kafka-thirdparty-libs","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/strimzi-kafka-operator-kafka-thirdparty-libs","purlType":"apk","versions":[{"text":"< 0.48.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.48.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"strimzi-kafka-operator-kafka-thirdparty-libs-cc","name":"strimzi-kafka-operator-kafka-thirdparty-libs-cc","label":"strimzi-kafka-operator-kafka-thirdparty-libs-cc","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/strimzi-kafka-operator-kafka-thirdparty-libs-cc","purlType":"apk","versions":[{"text":"< 0.48.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.48.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"strimzi-kafka-operator-topic-operator","name":"strimzi-kafka-operator-topic-operator","label":"strimzi-kafka-operator-topic-operator","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/strimzi-kafka-operator-topic-operator","purlType":"apk","versions":[{"text":"< 0.48.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.48.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"strimzi-kafka-operator-tracing-agent","name":"strimzi-kafka-operator-tracing-agent","label":"strimzi-kafka-operator-tracing-agent","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/strimzi-kafka-operator-tracing-agent","purlType":"apk","versions":[{"text":"< 0.48.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.48.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"strimzi-kafka-operator-user-operator","name":"strimzi-kafka-operator-user-operator","label":"strimzi-kafka-operator-user-operator","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/strimzi-kafka-operator-user-operator","purlType":"apk","versions":[{"text":"< 0.48.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.48.0-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"apache-pulsar","name":"apache-pulsar","label":"apache-pulsar","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/apache-pulsar","purlType":"apk","versions":[{"text":"< 4.1.1-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.1.1-r2","eol":null,"hubHref":null},{"vendor":"wolfi","product":"apache-pulsar-compat","name":"apache-pulsar-compat","label":"apache-pulsar-compat","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/apache-pulsar-compat","purlType":"apk","versions":[{"text":"< 4.1.1-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.1.1-r2","eol":null,"hubHref":null},{"vendor":"wolfi","product":"kafka_exporter-strimzi-compat","name":"kafka_exporter-strimzi-compat","label":"kafka_exporter-strimzi-compat","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/kafka_exporter-strimzi-compat","purlType":"apk","versions":[{"text":"< 0.48.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.48.0-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"kafka-strimzi-compat","name":"kafka-strimzi-compat","label":"kafka-strimzi-compat","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/kafka-strimzi-compat","purlType":"apk","versions":[{"text":"< 0.48.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.48.0-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"keycloak-26.4","name":"keycloak-26.4","label":"keycloak-26.4","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/keycloak-26.4","purlType":"apk","versions":[{"text":"< 26.4.7-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 26.4.7-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"keycloak-26.4-iamguarded-compat","name":"keycloak-26.4-iamguarded-compat","label":"keycloak-26.4-iamguarded-compat","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/keycloak-26.4-iamguarded-compat","purlType":"apk","versions":[{"text":"< 26.4.7-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 26.4.7-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"prometheus-jmx-exporter-strimzi-compat","name":"prometheus-jmx-exporter-strimzi-compat","label":"prometheus-jmx-exporter-strimzi-compat","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/prometheus-jmx-exporter-strimzi-compat","purlType":"apk","versions":[{"text":"< 0.48.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.48.0-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"strimzi-kafka-operator","name":"strimzi-kafka-operator","label":"strimzi-kafka-operator","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/strimzi-kafka-operator","purlType":"apk","versions":[{"text":"< 0.48.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.48.0-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"strimzi-kafka-operator-cluster-operator","name":"strimzi-kafka-operator-cluster-operator","label":"strimzi-kafka-operator-cluster-operator","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/strimzi-kafka-operator-cluster-operator","purlType":"apk","versions":[{"text":"< 0.48.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.48.0-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"strimzi-kafka-operator-kafka-agent","name":"strimzi-kafka-operator-kafka-agent","label":"strimzi-kafka-operator-kafka-agent","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/strimzi-kafka-operator-kafka-agent","purlType":"apk","versions":[{"text":"< 0.48.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.48.0-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"strimzi-kafka-operator-kafka-base","name":"strimzi-kafka-operator-kafka-base","label":"strimzi-kafka-operator-kafka-base","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/strimzi-kafka-operator-kafka-base","purlType":"apk","versions":[{"text":"< 0.48.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.48.0-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"strimzi-kafka-operator-kafka-init","name":"strimzi-kafka-operator-kafka-init","label":"strimzi-kafka-operator-kafka-init","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/strimzi-kafka-operator-kafka-init","purlType":"apk","versions":[{"text":"< 0.48.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.48.0-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"strimzi-kafka-operator-kafka-thirdparty-libs","name":"strimzi-kafka-operator-kafka-thirdparty-libs","label":"strimzi-kafka-operator-kafka-thirdparty-libs","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/strimzi-kafka-operator-kafka-thirdparty-libs","purlType":"apk","versions":[{"text":"< 0.48.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.48.0-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"strimzi-kafka-operator-kafka-thirdparty-libs-cc","name":"strimzi-kafka-operator-kafka-thirdparty-libs-cc","label":"strimzi-kafka-operator-kafka-thirdparty-libs-cc","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/strimzi-kafka-operator-kafka-thirdparty-libs-cc","purlType":"apk","versions":[{"text":"< 0.48.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.48.0-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"strimzi-kafka-operator-topic-operator","name":"strimzi-kafka-operator-topic-operator","label":"strimzi-kafka-operator-topic-operator","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/strimzi-kafka-operator-topic-operator","purlType":"apk","versions":[{"text":"< 0.48.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.48.0-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"strimzi-kafka-operator-tracing-agent","name":"strimzi-kafka-operator-tracing-agent","label":"strimzi-kafka-operator-tracing-agent","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/strimzi-kafka-operator-tracing-agent","purlType":"apk","versions":[{"text":"< 0.48.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.48.0-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"strimzi-kafka-operator-user-operator","name":"strimzi-kafka-operator-user-operator","label":"strimzi-kafka-operator-user-operator","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/strimzi-kafka-operator-user-operator","purlType":"apk","versions":[{"text":"< 0.48.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.48.0-r1","eol":null,"hubHref":null},{"vendor":"eclipse foundation","product":"vert.x","name":"Vert.x","label":"vert.x","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 4.0.0, < 4.5.22","noFixRecorded":false,"fixedIn":null},{"text":"≥ 5.0.0, < 5.0.5","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 4.0.0, < 4.5.22 | ≥ 5.0.0, < 5.0.5","eol":null,"hubHref":"/vendor/eclipse_foundation/vertx"},{"vendor":"eclipse","product":"vert.x","name":"vert.x","label":"vert.x","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 4.0.0, < 4.5.22","noFixRecorded":false,"fixedIn":null},{"text":"≥ 5.0.0, < 5.0.5","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 4.0.0, < 4.5.22 | ≥ 5.0.0, < 5.0.5","eol":null,"hubHref":"/vendor/eclipse/vertx"},{"vendor":"io.vertx","product":"vertx-web","name":"io.vertx:vertx-web","label":"vertx-web","ecosystem":"Maven","cpePart":null,"purl":"pkg:maven/io.vertx/vertx-web","purlType":"maven","versions":[{"text":"< 4.5.22","noFixRecorded":false,"fixedIn":null},{"text":"≥ 5.0.0, < 5.0.5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.5.22 | ≥ 5.0.0, < 5.0.5","eol":null,"hubHref":null}],"affectedCount":44,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/303","label":"gitlab.eclipse.org/security/vulnerability-reports/-/issues/303","hostname":"gitlab.eclipse.org","tags":["REPORT","WEB","Exploit","Issue Tracking","Vendor Advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/11xxx/CVE-2025-11966.json","label":"github.com/CVEProject/cvelistV5/tree/main/cves/2025/11xxx/CVE-2025-11966.json","hostname":"github.com","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-11966","label":"nvd.nist.gov/vuln/detail/CVE-2025-11966","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://github.com/vert-x3/vertx-web/security/advisories/GHSA-45p5-v273-3qqr","label":"github.com/vert-x3/vertx-web/security/advisories/GHSA-45p5-v273-3qqr","hostname":"github.com","tags":["WEB"]},{"url":"https://github.com/vert-x3/vertx-web","label":"github.com/vert-x3/vertx-web","hostname":"github.com","tags":["PACKAGE"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":["CGA-2HX7-X64H-72F4","CGA-X8HH-M38W-8M8J"]},"timeline":[{"kind":"published","date":"2025-10-22T14:44:24.145Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2025-10-22T15:26:41.527Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":36,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T17:04:02.705Z","stale":false,"partial":false}}