{"schemaVersion":3,"id":"CVE-2025-14505","aliases":["UBUNTU-CVE-2025-14505","DEBIAN-CVE-2025-14505","CGA-8vch-hh74-24c9","CGA-cr9v-pf5j-3835","CGA-gwfw-4jw3-5xf4","CGA-hw5c-2m4c-wg46","CGA-pcj9-v6j4-qgh8","CGA-qqr9-q2fq-qfwp","GHSA-848j-6mx2-7j84","CGA-24hp-rvqc-r634","CGA-29vg-j7qf-r993","CGA-2f8m-hrrj-rh2h","CGA-3c23-gmcx-f597","CGA-3hg6-m4gc-pv2x","CGA-3x84-xjv7-hwgx","CGA-44q7-9h95-89h6","CGA-48mj-v55f-qc6j","CGA-4gmg-3vvj-rgpm","CGA-4qgm-75xx-r48w","CGA-4wqv-q226-vfg6","CGA-4xfc-6q8r-cp8f","CGA-53gf-gm58-vgx9","CGA-543x-cp5w-8q9x","CGA-55xr-6rfr-6pw2","CGA-56fj-hjq5-m236","CGA-57vr-6599-4556","CGA-595r-vj3w-53rc","CGA-59gh-mrxm-f388","CGA-5grp-j9r6-hh7p","CGA-666h-487x-phqq","CGA-66p9-wcxg-45rh","CGA-6hf3-vp92-fx3w","CGA-6xr3-c865-75j3","CGA-79f6-cp94-hjxc","CGA-7gch-mf96-ph47","CGA-7gpg-h8mh-296v","CGA-7r3x-fc39-8xvj","CGA-7r76-c3p3-6r47","CGA-8296-5wwp-cqv9","CGA-84p4-2f5m-jpc8","CGA-8766-j29q-2hhr","CGA-8g3g-j3r3-x422","CGA-8mhj-7726-2c96","CGA-8vm2-gp3r-j733","CGA-99rf-wh49-998c","CGA-9jhr-ghm3-5pcm","CGA-9x4g-4x8g-38c8","CGA-9x7m-c3fm-qmjv","CGA-c392-7w5x-46hj","CGA-c58x-c4h8-4vx2","CGA-c93x-xx43-2vqg","CGA-cjc5-rf4c-j36w","CGA-crxf-q56r-338p","CGA-cv47-x4cr-m5w7","CGA-cxhw-wvc8-6wx6","CGA-fpfq-hcch-3hx4","CGA-fvrv-p8cr-pcv6","CGA-fx9v-pv23-j369","CGA-g534-8q9f-mcqw","CGA-g59x-hg8v-36w4","CGA-g5cw-437f-53x7","CGA-g5r2-m7fw-99m7","CGA-g62c-862q-3x6j","CGA-gc39-gc2m-3gqq","CGA-ggfv-pjx6-cf8f","CGA-gm9v-8cxf-m8cg","CGA-grpw-whjx-r2w5","CGA-h7c8-933h-55c3","CGA-hqff-x2p2-8743","CGA-j2f8-m22j-rmhj","CGA-j44h-6rjg-xf52","CGA-j4jv-6wcc-qvch","CGA-jp3m-43fv-7668","CGA-jx7h-vg27-92c4","CGA-m477-x742-rhg8","CGA-m49q-v6pf-9h5m","CGA-m59r-7r5q-vfq5","CGA-mgjq-vgh9-cfj6","CGA-p3v2-gxgp-3h94","CGA-p642-62wv-hv8c","CGA-pw6c-6rj8-83wf","CGA-q4ww-vfpf-xmh7","CGA-qcxq-x2fx-5wvp","CGA-qx6v-7mmq-ppr7","CGA-rg5c-hh9r-9jwr","CGA-rjp6-4f23-mmxg","CGA-rw6h-xwj8-3jhh","CGA-rxr8-vgh5-266v","CGA-v843-9q75-rqx3","CGA-vgq3-2v55-q238","CGA-vhh8-g452-rxhm","CGA-vjmg-5j95-q75g","CGA-vqq5-jp2m-hfcx","CGA-vrv2-m6wv-vgfc","CGA-vwvq-5jcx-q27v","CGA-whc9-vxcp-8fqv","CGA-wmjg-c23c-5m59","CGA-wrq3-v3r9-2p3m","CGA-wvhq-j5hp-qjqj","CGA-x7p2-2fq3-pj3q","CGA-xhr2-vvw4-38m6","CGA-xhxg-h5q4-9vjx","CGA-xjfx-qcj5-h9xp","CGA-xm84-hw67-h5fh","CGA-xxc4-42pf-r5pm","CGA-pg69-39vg-c33f","CGA-pfw9-h46x-vhj2","CGA-3p62-cxhh-hx48","CGA-mccq-gm44-72fj"],"status":"published","duplicateOf":null,"title":null,"description":"The ECDSA implementation of the Elliptic package generates incorrect signatures if an interim value of 'k' (as computed based on step 3.2 of  RFC 6979 https://datatracker.ietf.org/doc/html/rfc6979 ) has leading zeros and is susceptible to cryptanalysis, which can lead to secret key exposure. This happens, because the byte-length of 'k' is incorrectly computed, resulting in its getting truncated during the computation. Legitimate transactions or communications will be broken as a result. Furthermore, due to the nature of the fault, attackers could–under certain conditions–derive the secret key, if they could get their hands on both a faulty signature generated by a vulnerable version of Elliptic and a correct signature for the same inputs.\n\nThis issue affects all known versions of Elliptic (at the time of writing, versions less than or equal to 6.6.1).","dates":{"published":"2026-01-08T21:05:14.800Z","modified":"2026-01-08T21:22:55.144Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":5.6,"severity":"medium","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":5.6,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Ubuntu","score":5.6,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","exploitability":5.6,"impact":5.7,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Debian","score":5.6,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","exploitability":5.6,"impact":5.7,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Wolfi","score":5.6,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","exploitability":5.6,"impact":5.7,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Npm","score":6.3,"severity":"medium","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P","exploitability":null,"impact":null,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Npm","score":5.6,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","exploitability":5.6,"impact":5.7,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Chainguard","score":5.6,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","exploitability":5.6,"impact":5.7,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":5.6,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.0018,"percentile":0.07159,"severity":"low","asOf":"2026-10-20T00:00:00.000Z","change":{"pp":-0.003000000000000008,"baselineDate":"2026-09-20T00:00:00.000Z","baselineScore":0.00183},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00183,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00183,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00183,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00183,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00183,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00183,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00183,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00183,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00183,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00183,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00183,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00183,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00183,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00183,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00183,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00183,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00183,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00183,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00183,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00183,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.0018,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.0018,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.0018,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.0018,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.0018,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.0018,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.0018,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.0018,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.0018,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.0018,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.0018,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.0018,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.0018,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.0018,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.0018,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.0018,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.0018,"percentile":0.07159}],"last30":[{"date":"2026-09-20T00:00:00.000Z","score":0.00183,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00183,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00183,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00183,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00183,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00183,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00183,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00183,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00183,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00183,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00183,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00183,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00183,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00183,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.0018,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.0018,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.0018,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.0018,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.0018,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.0018,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.0018,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.0018,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.0018,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.0018,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.0018,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.0018,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.0018,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.0018,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.0018,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.0018,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.0018,"percentile":0.07159}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[{"id":"GITHUB_INDUTNY_ELLIPTIC","name":"Elliptic","source":"github","url":"https://github.com/indutny/elliptic/issues/321","maturity":"poc","reliabilityScore":0.3,"verified":false,"type":null,"platforms":[],"requiresAuth":null,"exploitdb":null,"metasploit":null}],"exploitCount":1,"weaknesses":[{"id":"CWE-1240","name":"Use of a Cryptographic Primitive with a Risky Implementation","description":"To fulfill the need for a cryptographic primitive, the product implements a cryptographic algorithm using a non-standard, unproven, or disallowed/non-compliant cryptographic implementation.","type":"weakness","status":"Draft","abstraction":"Base","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/1240.html"}],"affected":[{"vendor":"chainguard","product":"commercial-gitlab-rails-ee-19.1","name":"commercial-gitlab-rails-ee-19.1","label":"commercial-gitlab-rails-ee-19.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/commercial-gitlab-rails-ee-19.1","purlType":"apk","versions":[{"text":"< 19.1.7-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.1.7-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"commercial-gitlab-rails-ee-19.2","name":"commercial-gitlab-rails-ee-19.2","label":"commercial-gitlab-rails-ee-19.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/commercial-gitlab-rails-ee-19.2","purlType":"apk","versions":[{"text":"< 19.2.7-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.2.7-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"commercial-gitlab-rails-ee-19.3","name":"commercial-gitlab-rails-ee-19.3","label":"commercial-gitlab-rails-ee-19.3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/commercial-gitlab-rails-ee-19.3","purlType":"apk","versions":[{"text":"< 19.3.3-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.3.3-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"commercial-gitlab-rails-ee-19.4","name":"commercial-gitlab-rails-ee-19.4","label":"commercial-gitlab-rails-ee-19.4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/commercial-gitlab-rails-ee-19.4","purlType":"apk","versions":[{"text":"< 19.4.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.4.1-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"commercial-gitlab-rails-ee-fips-19.1","name":"commercial-gitlab-rails-ee-fips-19.1","label":"commercial-gitlab-rails-ee-fips-19.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/commercial-gitlab-rails-ee-fips-19.1","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"commercial-gitlab-rails-ee-fips-19.2","name":"commercial-gitlab-rails-ee-fips-19.2","label":"commercial-gitlab-rails-ee-fips-19.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/commercial-gitlab-rails-ee-fips-19.2","purlType":"apk","versions":[{"text":"< 19.2.7-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.2.7-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"commercial-gitlab-rails-ee-fips-19.3","name":"commercial-gitlab-rails-ee-fips-19.3","label":"commercial-gitlab-rails-ee-fips-19.3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/commercial-gitlab-rails-ee-fips-19.3","purlType":"apk","versions":[{"text":"< 19.3.3-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.3.3-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"commercial-gitlab-rails-ee-fips-19.4","name":"commercial-gitlab-rails-ee-fips-19.4","label":"commercial-gitlab-rails-ee-fips-19.4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/commercial-gitlab-rails-ee-fips-19.4","purlType":"apk","versions":[{"text":"< 19.4.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.4.1-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.1","name":"gitlab-rails-ce-18.1","label":"gitlab-rails-ce-18.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.1","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.10","name":"gitlab-rails-ce-18.10","label":"gitlab-rails-ce-18.10","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.10","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.11","name":"gitlab-rails-ce-18.11","label":"gitlab-rails-ce-18.11","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.11","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.5","name":"gitlab-rails-ce-18.5","label":"gitlab-rails-ce-18.5","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.5","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.6","name":"gitlab-rails-ce-18.6","label":"gitlab-rails-ce-18.6","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.6","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.7","name":"gitlab-rails-ce-18.7","label":"gitlab-rails-ce-18.7","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.7","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.8","name":"gitlab-rails-ce-18.8","label":"gitlab-rails-ce-18.8","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.8","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.9","name":"gitlab-rails-ce-18.9","label":"gitlab-rails-ce-18.9","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.9","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-19.0","name":"gitlab-rails-ce-19.0","label":"gitlab-rails-ce-19.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-19.0","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-19.1","name":"gitlab-rails-ce-19.1","label":"gitlab-rails-ce-19.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-19.1","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-19.2","name":"gitlab-rails-ce-19.2","label":"gitlab-rails-ce-19.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-19.2","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-19.3","name":"gitlab-rails-ce-19.3","label":"gitlab-rails-ce-19.3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-19.3","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-19.4","name":"gitlab-rails-ce-19.4","label":"gitlab-rails-ce-19.4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-19.4","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-19.5","name":"gitlab-rails-ce-19.5","label":"gitlab-rails-ce-19.5","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-19.5","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.1","name":"gitlab-rails-ce-fips-18.1","label":"gitlab-rails-ce-fips-18.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.1","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.10","name":"gitlab-rails-ce-fips-18.10","label":"gitlab-rails-ce-fips-18.10","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.10","purlType":"apk","versions":[{"text":"< 18.10.8-r8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 18.10.8-r8","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.11","name":"gitlab-rails-ce-fips-18.11","label":"gitlab-rails-ce-fips-18.11","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.11","purlType":"apk","versions":[{"text":"< 18.11.12-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 18.11.12-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.5","name":"gitlab-rails-ce-fips-18.5","label":"gitlab-rails-ce-fips-18.5","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.5","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.6","name":"gitlab-rails-ce-fips-18.6","label":"gitlab-rails-ce-fips-18.6","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.6","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.7","name":"gitlab-rails-ce-fips-18.7","label":"gitlab-rails-ce-fips-18.7","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.7","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.8","name":"gitlab-rails-ce-fips-18.8","label":"gitlab-rails-ce-fips-18.8","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.8","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.9","name":"gitlab-rails-ce-fips-18.9","label":"gitlab-rails-ce-fips-18.9","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.9","purlType":"apk","versions":[{"text":"< 18.9.8-r8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 18.9.8-r8","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-19.0","name":"gitlab-rails-ce-fips-19.0","label":"gitlab-rails-ce-fips-19.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-19.0","purlType":"apk","versions":[{"text":"< 19.0.9-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.0.9-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-19.1","name":"gitlab-rails-ce-fips-19.1","label":"gitlab-rails-ce-fips-19.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-19.1","purlType":"apk","versions":[{"text":"< 19.1.8-r9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.1.8-r9","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-19.2","name":"gitlab-rails-ce-fips-19.2","label":"gitlab-rails-ce-fips-19.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-19.2","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-19.3","name":"gitlab-rails-ce-fips-19.3","label":"gitlab-rails-ce-fips-19.3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-19.3","purlType":"apk","versions":[{"text":"< 19.3.3-r8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.3.3-r8","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-19.4","name":"gitlab-rails-ce-fips-19.4","label":"gitlab-rails-ce-fips-19.4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-19.4","purlType":"apk","versions":[{"text":"< 19.4.1-r8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.4.1-r8","eol":null,"hubHref":null},{"vendor":"chainguard","product":"librechat","name":"librechat","label":"librechat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/librechat","purlType":"apk","versions":[{"text":"< 0.8.4-r7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.8.4-r7","eol":null,"hubHref":null},{"vendor":"chainguard","product":"nextcloud-server-31","name":"nextcloud-server-31","label":"nextcloud-server-31","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/nextcloud-server-31","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"nextcloud-server-32","name":"nextcloud-server-32","label":"nextcloud-server-32","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/nextcloud-server-32","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"nextcloud-server-33","name":"nextcloud-server-33","label":"nextcloud-server-33","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/nextcloud-server-33","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"nextcloud-server-34","name":"nextcloud-server-34","label":"nextcloud-server-34","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/nextcloud-server-34","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"nextcloud-server-35","name":"nextcloud-server-35","label":"nextcloud-server-35","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/nextcloud-server-35","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-3","name":"opensearch-dashboards-3","label":"opensearch-dashboards-3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-3","purlType":"apk","versions":[{"text":"< 3.5.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.5.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-3-fips","name":"opensearch-dashboards-3-fips","label":"opensearch-dashboards-3-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-3-fips","purlType":"apk","versions":[{"text":"< 3.5.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.5.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wazuh-dashboard-alerting-dashboards-plugin","name":"wazuh-dashboard-alerting-dashboards-plugin","label":"wazuh-dashboard-alerting-dashboards-plugin","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wazuh-dashboard-alerting-dashboards-plugin","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wazuh-dashboard-alerting-dashboards-plugin-fips","name":"wazuh-dashboard-alerting-dashboards-plugin-fips","label":"wazuh-dashboard-alerting-dashboards-plugin-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wazuh-dashboard-alerting-dashboards-plugin-fips","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wazuh-dashboard-anomaly-detection-dashboards-plugin","name":"wazuh-dashboard-anomaly-detection-dashboards-plugin","label":"wazuh-dashboard-anomaly-detection-dashboards-plugin","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wazuh-dashboard-anomaly-detection-dashboards-plugin","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wazuh-dashboard-anomaly-detection-dashboards-plugin-fips","name":"wazuh-dashboard-anomaly-detection-dashboards-plugin-fips","label":"wazuh-dashboard-anomaly-detection-dashboards-plugin-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wazuh-dashboard-anomaly-detection-dashboards-plugin-fips","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wazuh-dashboard-dashboards-reporting","name":"wazuh-dashboard-dashboards-reporting","label":"wazuh-dashboard-dashboards-reporting","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wazuh-dashboard-dashboards-reporting","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wazuh-dashboard-dashboards-reporting-fips","name":"wazuh-dashboard-dashboards-reporting-fips","label":"wazuh-dashboard-dashboards-reporting-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wazuh-dashboard-dashboards-reporting-fips","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wazuh-dashboard-index-management-dashboards-plugin","name":"wazuh-dashboard-index-management-dashboards-plugin","label":"wazuh-dashboard-index-management-dashboards-plugin","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wazuh-dashboard-index-management-dashboards-plugin","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wazuh-dashboard-index-management-dashboards-plugin-fips","name":"wazuh-dashboard-index-management-dashboards-plugin-fips","label":"wazuh-dashboard-index-management-dashboards-plugin-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wazuh-dashboard-index-management-dashboards-plugin-fips","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wazuh-dashboard-security-plugin","name":"wazuh-dashboard-security-plugin","label":"wazuh-dashboard-security-plugin","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wazuh-dashboard-security-plugin","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wazuh-dashboard-security-plugin-fips","name":"wazuh-dashboard-security-plugin-fips","label":"wazuh-dashboard-security-plugin-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wazuh-dashboard-security-plugin-fips","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"nextcloud-server-32","name":"nextcloud-server-32","label":"nextcloud-server-32","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/nextcloud-server-32","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"nextcloud-server-33","name":"nextcloud-server-33","label":"nextcloud-server-33","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/nextcloud-server-33","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"opensearch-dashboards-3","name":"opensearch-dashboards-3","label":"opensearch-dashboards-3","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/opensearch-dashboards-3","purlType":"apk","versions":[{"text":"< 3.5.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.5.0-r0","eol":null,"hubHref":null},{"vendor":"debian","product":"node-elliptic","name":"node-elliptic","label":"node-elliptic","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/node-elliptic","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 6.6.1+dfsg+~6.4.18-2","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 6.6.1+dfsg+~6.4.18-2","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"node-elliptic","name":"node-elliptic","label":"node-elliptic","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/node-elliptic","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"Npm","product":"elliptic","name":"elliptic","label":"elliptic","ecosystem":"Npm","cpePart":null,"purl":"pkg:npm/elliptic","purlType":"npm","versions":[{"text":"≤ 6.6.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 6.6.1","eol":null,"hubHref":null}],"affectedCount":59,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://www.herodevs.com/vulnerability-directory/cve-2025-14505","label":"www.herodevs.com/vulnerability-directory/cve-2025-14505","hostname":"www.herodevs.com","tags":["Third Party Advisory","Advisory","WEB"]},{"url":"https://github.com/indutny/elliptic/issues/321","label":"github.com/indutny/elliptic/issues/321","hostname":"github.com","tags":["Issue Tracking","Exploit","REPORT","WEB"]},{"url":"https://ubuntu.com/security/CVE-2025-14505","label":"ubuntu.com/security/CVE-2025-14505","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-14505","label":"www.cve.org/CVERecord?id=CVE-2025-14505","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-14505","label":"security-tracker.debian.org/tracker/CVE-2025-14505","hostname":"security-tracker.debian.org","tags":["Advisory"]},{"url":"https://registry.npmjs.org","label":"registry.npmjs.org","hostname":"registry.npmjs.org","tags":["WEB"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/14xxx/CVE-2025-14505.json","label":"github.com/CVEProject/cvelistV5/tree/main/cves/2025/14xxx/CVE-2025-14505.json","hostname":"github.com","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-14505","label":"nvd.nist.gov/vuln/detail/CVE-2025-14505","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://github.com/indutny/elliptic","label":"github.com/indutny/elliptic","hostname":"github.com","tags":["PACKAGE"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":["CGA-MG79-6J8J-PFPR"]},"timeline":[{"kind":"published","date":"2026-01-08T21:05:14.800Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-01-08T21:22:55.144Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":32,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T09:08:52.459Z","stale":false,"partial":false}}