{"schemaVersion":3,"id":"CVE-2025-12383","aliases":["CGA-2c48-mc5r-fh5g","CGA-2h6g-xcjx-qq9h","CGA-364x-gmvv-p2fw","CGA-42q8-h52m-cmj5","CGA-7c2r-cx78-2fqm","CGA-9mcr-2mjv-r5cv","CGA-ccg5-5cq6-qcqr","CGA-gqwg-36h2-j999","CGA-j37j-c85m-p734","CGA-j8wv-p6rc-m7jj","CGA-jx28-h56q-vhfj","CGA-q22r-83r6-c9qq","CGA-rfv4-gj96-96xq","CGA-rgg7-7mq4-j29q","CGA-rv42-m7m3-3r6r","CGA-wjxg-8j52-pxv4","CGA-ww2p-7c3p-mrm6","CGA-x3cq-jrxx-92wp","CGA-24h2-64h9-6vj2","CGA-28ch-g4wx-557h","CGA-2v95-29gj-4jcw","CGA-3c5f-hxv7-g39p","CGA-3fc5-w776-9f7v","CGA-3jjx-4xcq-6pq9","CGA-4h2v-xr6w-wwmq","CGA-53cj-2qc3-8vm4","CGA-596g-vhq4-vjxp","CGA-5gf9-2hwg-qf8h","CGA-5m6m-3pxh-jvf8","CGA-5xj4-c2xc-rffm","CGA-6qcm-r2c9-cvrp","CGA-6wx7-6v9c-qgc4","CGA-778q-84g6-hx3f","CGA-7c4q-x9j6-rc54","CGA-7f4p-xrgm-9g3m","CGA-7v4h-xwqh-hfx8","CGA-8m2q-jpgf-68v9","CGA-9mxp-q62p-8p25","CGA-9pvv-wxfq-vmq6","CGA-f256-gpxv-hpfh","CGA-f4j5-5wvq-ch75","CGA-f7rj-3ph3-9mx5","CGA-f89x-49w5-fw2r","CGA-fmvm-4wr8-j3p3","CGA-gfgj-768p-f9xf","CGA-gg5f-hgpc-25xx","CGA-hxwx-g277-jpj2","CGA-j2c7-28wg-rr5p","CGA-j2g3-4w6w-2v8j","CGA-jchv-grqg-x236","CGA-jgfh-69pr-qrjm","CGA-jv23-r5vc-f4jj","CGA-pmcc-8qx8-8qqr","GHSA-7p63-w6x9-6gr7","CGA-pwj5-q596-4j3p","CGA-rqqh-6h8q-w6xw","CGA-vjv4-9pj9-jj62","CGA-vr8q-rwhm-mv28","CGA-w2h4-98c4-hmfm","CGA-x5p3-73p9-v9j2","CGA-xvq5-52hr-93x6"],"status":"published","duplicateOf":null,"title":null,"description":"In Eclipse Jersey versions 2.45, 3.0.16, 3.1.9 a race condition can cause ignoring of critical SSL configurations - such as mutual authentication, custom key/trust stores, and other security settings. This issue may result in SSLHandshakeException under normal circumstances, but under certain conditions, it could lead to unauthorized trust in insecure servers (see PoC)","dates":{"published":"2025-11-18T15:14:37.765Z","modified":"2025-11-18T21:34:35.027Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":9.4,"severity":"critical","version":"4.0","versionLabel":"v4.0","source":"CVE.org","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"4.0","versionLabel":"v4.0","source":"CVE.org","score":9.4,"severity":"critical","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N","exploitability":null,"impact":null,"computed":false},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Wolfi","score":9.4,"severity":"critical","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N","exploitability":null,"impact":null,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Chainguard","score":9.4,"severity":"critical","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N","exploitability":null,"impact":null,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Maven","score":9.4,"severity":"critical","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N","exploitability":null,"impact":null,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"NVD","score":9.4,"severity":"critical","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":7.4,"severity":"high","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00298,"percentile":0.21143,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0.018000000000000002,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.0028},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.0028,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.0028,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.0028,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.0028,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.0028,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.0028,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.0028,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.0028,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.0028,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.0028,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.0028,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.0028,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.0028,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.0028,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.0028,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.0028,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.0028,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.0028,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.0028,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.0028,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.0028,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.0028,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.0028,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.0028,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.0028,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.0028,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.0028,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.0028,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.0028,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.0028,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.0028,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.0028,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.0028,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.0028,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.0028,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00298,"percentile":0.21143}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.0028,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.0028,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.0028,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.0028,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.0028,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.0028,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.0028,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.0028,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.0028,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.0028,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.0028,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.0028,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.0028,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.0028,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.0028,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.0028,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.0028,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.0028,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.0028,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.0028,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.0028,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.0028,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.0028,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.0028,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.0028,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.0028,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.0028,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.0028,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.0028,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.0028,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00298,"percentile":0.21143}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-362","name":"Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')","description":"The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.","type":"weakness","status":"Draft","abstraction":"Class","likelihoodOfExploit":"Medium","url":"https://cwe.mitre.org/data/definitions/362.html"}],"affected":[{"vendor":"chainguard","product":"apache-hop-fips","name":"apache-hop-fips","label":"apache-hop-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/apache-hop-fips","purlType":"apk","versions":[{"text":"< 2.15.0-r16","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.15.0-r16","eol":null,"hubHref":null},{"vendor":"chainguard","product":"apache-pulsar","name":"apache-pulsar","label":"apache-pulsar","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/apache-pulsar","purlType":"apk","versions":[{"text":"< 4.1.2-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.1.2-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"apache-pulsar-compat","name":"apache-pulsar-compat","label":"apache-pulsar-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/apache-pulsar-compat","purlType":"apk","versions":[{"text":"< 4.1.2-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.1.2-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"celeborn-0.5","name":"celeborn-0.5","label":"celeborn-0.5","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/celeborn-0.5","purlType":"apk","versions":[{"text":"< 0.5.4-r10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.5.4-r10","eol":null,"hubHref":null},{"vendor":"chainguard","product":"celeborn-0.5-compat","name":"celeborn-0.5-compat","label":"celeborn-0.5-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/celeborn-0.5-compat","purlType":"apk","versions":[{"text":"< 0.5.4-r10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.5.4-r10","eol":null,"hubHref":null},{"vendor":"chainguard","product":"celeborn-0.6","name":"celeborn-0.6","label":"celeborn-0.6","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/celeborn-0.6","purlType":"apk","versions":[{"text":"< 0.6.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.6.1-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"celeborn-0.6-compat","name":"celeborn-0.6-compat","label":"celeborn-0.6-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/celeborn-0.6-compat","purlType":"apk","versions":[{"text":"< 0.6.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.6.1-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kafka-3.7","name":"kafka-3.7","label":"kafka-3.7","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kafka-3.7","purlType":"apk","versions":[{"text":"< 3.7.2-r47","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.7.2-r47","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kafka-3.9","name":"kafka-3.9","label":"kafka-3.9","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kafka-3.9","purlType":"apk","versions":[{"text":"< 3.9.1-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.9.1-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kafka-iamguarded-compat-4.0","name":"kafka-iamguarded-compat-4.0","label":"kafka-iamguarded-compat-4.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kafka-iamguarded-compat-4.0","purlType":"apk","versions":[{"text":"< 4.0.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.0.1-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"neo4j-2025.07","name":"neo4j-2025.07","label":"neo4j-2025.07","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/neo4j-2025.07","purlType":"apk","versions":[{"text":"< 2025.07.1-r8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2025.07.1-r8","eol":null,"hubHref":null},{"vendor":"chainguard","product":"neo4j-2025.08","name":"neo4j-2025.08","label":"neo4j-2025.08","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/neo4j-2025.08","purlType":"apk","versions":[{"text":"< 2025.08.0-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2025.08.0-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"neo4j-2025.08-docker-publish","name":"neo4j-2025.08-docker-publish","label":"neo4j-2025.08-docker-publish","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/neo4j-2025.08-docker-publish","purlType":"apk","versions":[{"text":"< 2025.08.0-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2025.08.0-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"neo4j-2025.09","name":"neo4j-2025.09","label":"neo4j-2025.09","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/neo4j-2025.09","purlType":"apk","versions":[{"text":"< 2025.09.0-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2025.09.0-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"neo4j-2025.09-browser","name":"neo4j-2025.09-browser","label":"neo4j-2025.09-browser","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/neo4j-2025.09-browser","purlType":"apk","versions":[{"text":"< 2025.09.0-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2025.09.0-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"neo4j-2025.10","name":"neo4j-2025.10","label":"neo4j-2025.10","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/neo4j-2025.10","purlType":"apk","versions":[{"text":"< 2025.10.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2025.10.1-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"neo4j-2025.10-browser","name":"neo4j-2025.10-browser","label":"neo4j-2025.10-browser","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/neo4j-2025.10-browser","purlType":"apk","versions":[{"text":"< 2025.10.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2025.10.1-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"neo4j-2025.10-docker-publish","name":"neo4j-2025.10-docker-publish","label":"neo4j-2025.10-docker-publish","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/neo4j-2025.10-docker-publish","purlType":"apk","versions":[{"text":"< 2025.10.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2025.10.1-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"neo4j-4.4","name":"neo4j-4.4","label":"neo4j-4.4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/neo4j-4.4","purlType":"apk","versions":[{"text":"< 4.4.46-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.4.46-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"neo4j-5.26","name":"neo4j-5.26","label":"neo4j-5.26","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/neo4j-5.26","purlType":"apk","versions":[{"text":"< 5.26.16-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.26.16-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"neo4j-5.26-docker-publish","name":"neo4j-5.26-docker-publish","label":"neo4j-5.26-docker-publish","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/neo4j-5.26-docker-publish","purlType":"apk","versions":[{"text":"< 5.26.16-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.26.16-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"spark-3.5","name":"spark-3.5","label":"spark-3.5","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/spark-3.5","purlType":"apk","versions":[{"text":"< 3.5.7-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.5.7-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"spark-3.5-scala-2.12","name":"spark-3.5-scala-2.12","label":"spark-3.5-scala-2.12","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/spark-3.5-scala-2.12","purlType":"apk","versions":[{"text":"< 3.5.7-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.5.7-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"spark-3.5-scala-2.12-compat","name":"spark-3.5-scala-2.12-compat","label":"spark-3.5-scala-2.12-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/spark-3.5-scala-2.12-compat","purlType":"apk","versions":[{"text":"< 3.5.7-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.5.7-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"spark-3.5-scala-2.12-iamguarded-compat","name":"spark-3.5-scala-2.12-iamguarded-compat","label":"spark-3.5-scala-2.12-iamguarded-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/spark-3.5-scala-2.12-iamguarded-compat","purlType":"apk","versions":[{"text":"< 3.5.7-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.5.7-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"spark-3.5-scala-2.13","name":"spark-3.5-scala-2.13","label":"spark-3.5-scala-2.13","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/spark-3.5-scala-2.13","purlType":"apk","versions":[{"text":"< 3.5.7-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.5.7-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"spark-4.0","name":"spark-4.0","label":"spark-4.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/spark-4.0","purlType":"apk","versions":[{"text":"< 4.0.1-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.0.1-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"spark-4.0-scala-2.13-compat","name":"spark-4.0-scala-2.13-compat","label":"spark-4.0-scala-2.13-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/spark-4.0-scala-2.13-compat","purlType":"apk","versions":[{"text":"< 4.0.1-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.0.1-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"spark-fips-3.5","name":"spark-fips-3.5","label":"spark-fips-3.5","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/spark-fips-3.5","purlType":"apk","versions":[{"text":"< 3.5.4-r17","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.5.4-r17","eol":null,"hubHref":null},{"vendor":"chainguard","product":"spark-fips-3.5-scala-2.12","name":"spark-fips-3.5-scala-2.12","label":"spark-fips-3.5-scala-2.12","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/spark-fips-3.5-scala-2.12","purlType":"apk","versions":[{"text":"< 3.5.4-r17","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.5.4-r17","eol":null,"hubHref":null},{"vendor":"chainguard","product":"spark-fips-3.5-scala-2.12-compat","name":"spark-fips-3.5-scala-2.12-compat","label":"spark-fips-3.5-scala-2.12-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/spark-fips-3.5-scala-2.12-compat","purlType":"apk","versions":[{"text":"< 3.5.4-r17","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.5.4-r17","eol":null,"hubHref":null},{"vendor":"chainguard","product":"spark-fips-3.5-scala-2.13","name":"spark-fips-3.5-scala-2.13","label":"spark-fips-3.5-scala-2.13","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/spark-fips-3.5-scala-2.13","purlType":"apk","versions":[{"text":"< 3.5.4-r17","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.5.4-r17","eol":null,"hubHref":null},{"vendor":"chainguard","product":"spark-fips-3.5-scala-2.13-compat","name":"spark-fips-3.5-scala-2.13-compat","label":"spark-fips-3.5-scala-2.13-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/spark-fips-3.5-scala-2.13-compat","purlType":"apk","versions":[{"text":"< 3.5.4-r17","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.5.4-r17","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wso2is","name":"wso2is","label":"wso2is","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wso2is","purlType":"apk","versions":[{"text":"< 7.2.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.2.0-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"apache-pulsar","name":"apache-pulsar","label":"apache-pulsar","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/apache-pulsar","purlType":"apk","versions":[{"text":"< 4.1.2-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.1.2-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"apache-pulsar-compat","name":"apache-pulsar-compat","label":"apache-pulsar-compat","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/apache-pulsar-compat","purlType":"apk","versions":[{"text":"< 4.1.2-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.1.2-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"celeborn-0.6","name":"celeborn-0.6","label":"celeborn-0.6","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/celeborn-0.6","purlType":"apk","versions":[{"text":"< 0.6.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.6.1-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"celeborn-0.6-compat","name":"celeborn-0.6-compat","label":"celeborn-0.6-compat","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/celeborn-0.6-compat","purlType":"apk","versions":[{"text":"< 0.6.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.6.1-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"neo4j-2025.10","name":"neo4j-2025.10","label":"neo4j-2025.10","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/neo4j-2025.10","purlType":"apk","versions":[{"text":"< 2025.10.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2025.10.1-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"neo4j-2025.10-browser","name":"neo4j-2025.10-browser","label":"neo4j-2025.10-browser","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/neo4j-2025.10-browser","purlType":"apk","versions":[{"text":"< 2025.10.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2025.10.1-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"neo4j-2025.10-docker-publish","name":"neo4j-2025.10-docker-publish","label":"neo4j-2025.10-docker-publish","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/neo4j-2025.10-docker-publish","purlType":"apk","versions":[{"text":"< 2025.10.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2025.10.1-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"spark-4.0","name":"spark-4.0","label":"spark-4.0","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/spark-4.0","purlType":"apk","versions":[{"text":"< 4.0.1-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.0.1-r2","eol":null,"hubHref":null},{"vendor":"wolfi","product":"spark-4.0-scala-2.13-compat","name":"spark-4.0-scala-2.13-compat","label":"spark-4.0-scala-2.13-compat","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/spark-4.0-scala-2.13-compat","purlType":"apk","versions":[{"text":"< 4.0.1-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.0.1-r2","eol":null,"hubHref":null},{"vendor":"eclipse foundation","product":"jersey","name":"Jersey","label":"jersey","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"2.45","noFixRecorded":false,"fixedIn":null},{"text":"3.0.16","noFixRecorded":false,"fixedIn":null},{"text":"3.1.9","noFixRecorded":false,"fixedIn":null}],"versionsText":"2.45 | 3.0.16 | 3.1.9","eol":null,"hubHref":"/vendor/eclipse_foundation/jersey"},{"vendor":"eclipse","product":"jersey","name":"jersey","label":"jersey","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"2.45","noFixRecorded":false,"fixedIn":null},{"text":"3.0.16","noFixRecorded":false,"fixedIn":null},{"text":"3.1.9","noFixRecorded":false,"fixedIn":null}],"versionsText":"2.45 | 3.0.16 | 3.1.9","eol":null,"hubHref":"/vendor/eclipse/jersey"},{"vendor":"org.glassfish.jersey.core","product":"jersey-client","name":"org.glassfish.jersey.core:jersey-client","label":"jersey-client","ecosystem":"Maven","cpePart":null,"purl":"pkg:maven/org.glassfish.jersey.core/jersey-client","purlType":"maven","versions":[{"text":"≥ 2.45, < 2.46","noFixRecorded":false,"fixedIn":null},{"text":"≥ 3.0.16, < 3.0.17","noFixRecorded":false,"fixedIn":null},{"text":"≥ 3.1.9, < 3.1.10","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 2.45, < 2.46 | ≥ 3.0.16, < 3.0.17 | ≥ 3.1.9, < 3.1.10","eol":null,"hubHref":null}],"affectedCount":46,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://gitlab.eclipse.org/security/cve-assignment/-/issues/74","label":"gitlab.eclipse.org/security/cve-assignment/-/issues/74","hostname":"gitlab.eclipse.org","tags":["REPORT","WEB","Issue Tracking","Vendor Advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/12xxx/CVE-2025-12383.json","label":"github.com/CVEProject/cvelistV5/tree/main/cves/2025/12xxx/CVE-2025-12383.json","hostname":"github.com","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-12383","label":"nvd.nist.gov/vuln/detail/CVE-2025-12383","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://github.com/eclipse-ee4j/jersey","label":"github.com/eclipse-ee4j/jersey","hostname":"github.com","tags":["PACKAGE"]},{"url":"https://github.com/eclipse-ee4j/jersey/pull/5749","label":"github.com/eclipse-ee4j/jersey/pull/5749","hostname":"github.com","tags":["WEB"]},{"url":"https://github.com/eclipse-ee4j/jersey/pull/5794","label":"github.com/eclipse-ee4j/jersey/pull/5794","hostname":"github.com","tags":["WEB"]},{"url":"https://github.com/eclipse-ee4j/jersey/commit/425bc883d8d623ef8d3c448fafd36729f7741bcb","label":"github.com/eclipse-ee4j/jersey/commit/425bc883d8d623ef8d3c448fafd36729f7741bcb","hostname":"github.com","tags":["WEB"]},{"url":"https://github.com/eclipse-ee4j/jersey/commit/b2c7ba6d388cb9722f39073d7e82aa818fec49d5","label":"github.com/eclipse-ee4j/jersey/commit/b2c7ba6d388cb9722f39073d7e82aa818fec49d5","hostname":"github.com","tags":["WEB"]},{"url":"https://github.com/dtbaum/jerseyCveCandidate","label":"github.com/dtbaum/jerseyCveCandidate","hostname":"github.com","tags":["WEB"]},{"url":"https://github.com/eclipse-ee4j/jersey/releases/tag/2.46","label":"github.com/eclipse-ee4j/jersey/releases/tag/2.46","hostname":"github.com","tags":["WEB"]},{"url":"https://github.com/eclipse-ee4j/jersey/releases/tag/3.0.17","label":"github.com/eclipse-ee4j/jersey/releases/tag/3.0.17","hostname":"github.com","tags":["WEB"]},{"url":"https://github.com/eclipse-ee4j/jersey/releases/tag/3.1.10","label":"github.com/eclipse-ee4j/jersey/releases/tag/3.1.10","hostname":"github.com","tags":["WEB"]},{"url":"https://github.com/eclipse-ee4j/jersey/releases/tag/4.0.0-M2","label":"github.com/eclipse-ee4j/jersey/releases/tag/4.0.0-M2","hostname":"github.com","tags":["WEB"]},{"url":"https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/253","label":"gitlab.eclipse.org/security/vulnerability-reports/-/issues/253","hostname":"gitlab.eclipse.org","tags":["WEB"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":["CGA-G3GR-35Q9-QVP3","CGA-GGJ3-448V-XCH3","CGA-H95G-FHVV-HXPF","CGA-J2W9-C5MG-P838","CGA-W32Q-FCGJ-FG3W"]},"timeline":[{"kind":"published","date":"2025-11-18T15:14:37.765Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2025-11-18T21:34:35.027Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":70,"level":"high","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T12:03:11.693Z","stale":false,"partial":false}}