[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2025-15468":6},{"stargazers_count":4,"fetched_at":5},8,"2026-09-19T17:35:29.592Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":20,"aliases":21,"duplicate_of":9,"upstream":32,"downstream":33,"duplicates":66,"related":67,"reserved_at":9,"published_at":80,"modified_at":81,"state":82,"summary":83,"references_raw":92,"kevs":138,"epss":139,"epss_history":142,"metrics":417,"affected":433},"CVE-2025-15468","Issue summary: If an application using the SSL_CIPHER_find() function in\na QUIC protocol client or server receives an unknown cipher suite from\nthe peer, a NULL dereference occurs.\n\nImpact summary: A NULL pointer dereference leads to abnormal termination of\nthe running process causing Denial of Service.\n\nSome applications call SSL_CIPHER_find() from the client_hello_cb callback\non the cipher ID received from the peer. If this is done with an SSL object\nimplementing the QUIC protocol, NULL pointer dereference will happen if\nthe examined cipher ID is unknown or unsupported.\n\nAs it is not very common to call this function in applications using the QUIC \nprotocol and the worst outcome is Denial of Service, the issue was assessed\nas Low severity.\n\nThe vulnerable code was introduced in the 3.2 version with the addition\nof the QUIC protocol support.\n\nThe FIPS modules in 3.6, 3.5, 3.4 and 3.3 are not affected by this issue,\nas the QUIC implementation is outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.6, 3.5, 3.4 and 3.3 are vulnerable to this issue.\n\nOpenSSL 3.0, 1.1.1 and 1.0.2 are not affected by this issue.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-476","NULL Pointer Dereference","The product dereferences a pointer that it expects to be valid but is NULL.","weakness","Stable","Base","Medium",[],[],[22,23,24,25,26,27,28,29,30,31],"DEBIAN-CVE-2025-15468","ALPINE-CVE-2025-15468","CGA-cfrp-4x8p-ghrr","CGA-36cf-cmx2-6qm9","CGA-6cx6-vm7f-rmrf","CGA-f53j-5qxr-ph9p","CGA-hx69-f436-mffg","CGA-jx45-2589-qh2p","CGA-r5rf-jcg8-h4gf","CGA-vmpm-7qr6-cwvf",[],[34,36,38,40,42,44,46,48,49,51,53,55,56,58,60,62,64],{"_key":35},"SUSE-SU-2026:20211-1",{"_key":37},"SUSE-SU-2026:20223-1",{"_key":39},"SUSE-SU-2026:20542-1",{"_key":41},"SUSE-SU-2026:20607-1",{"_key":43},"OPENSUSE-SU-2026:10237-1",{"_key":45},"OPENSUSE-SU-2026:20152-1",{"_key":47},"UBUNTU-CVE-2025-15468",{"_key":22},{"_key":50},"SUSE-SU-2026:2411-1",{"_key":52},"SUSE-SU-2026:22143-1",{"_key":54},"SUSE-SU-2026:2662-1",{"_key":23},{"_key":57},"SUSE-SU-2026:3835-1",{"_key":59},"USN-7980-1",{"_key":61},"RHSA-2026:1472",{"_key":63},"RHSA-2026:1473",{"_key":65},"RHSA-2026:7261",[],[68,69,70,71,72,73,74,75,76,77,78],{"_key":35},{"_key":37},{"_key":39},{"_key":41},{"_key":43},{"_key":45},{"_key":50},{"_key":52},{"_key":54},{"_key":57},{"_key":79},"CGA-GG8H-2F2R-7QX4","2026-01-27T16:01:20.824Z","2026-01-29T14:53:03.572Z","Analyzed",{"cisa_kev":84,"cisa_ransomware":84,"cisa_vendor":9,"epss_severity":85,"epss_score":86,"severity":87,"severity_score":88,"severity_version":89,"severity_source":90,"severity_vector":91,"severity_status":82},false,"low",0.00777,"medium",5.9,"v3.1","cve.org","CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",[93,102,108,112,116,120,125,130,134],{"url":94,"sources":95,"tags":99},"https://openssl-library.org/news/secadv/20260127.txt",[90,96,97,98],"nvd","osv_wolfi","osv_chainguard",[100,101],"Vendor Advisory","Advisory",{"url":103,"sources":104,"tags":105},"https://github.com/openssl/openssl/commit/b2539639400288a4580fe2d76247541b976bade4",[90,96,97,98],[106,107],"Patch","FIX",{"url":109,"sources":110,"tags":111},"https://github.com/openssl/openssl/commit/1f08e54bad32843044fe8a675948d65e3b4ece65",[90,96,97,98],[106,107],{"url":113,"sources":114,"tags":115},"https://github.com/openssl/openssl/commit/7c88376731c589ee5b36116c5a6e32d5ae5f7ae2",[90,96,97,98],[106,107],{"url":117,"sources":118,"tags":119},"https://github.com/openssl/openssl/commit/d75b309879631d45b972396ce4e5102559c64ac7",[90,96,97,98],[106,107],{"url":121,"sources":122,"tags":124},"https://security-tracker.debian.org/tracker/CVE-2025-15468",[123],"osv_debian",[101],{"url":126,"sources":127,"tags":129},"https://security.alpinelinux.org/vuln/CVE-2025-15468",[128],"osv_alpine",[101],{"url":131,"sources":132,"tags":133},"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/15xxx/CVE-2025-15468.json",[97,98],[101],{"url":135,"sources":136,"tags":137},"https://nvd.nist.gov/vuln/detail/CVE-2025-15468",[97,98],[101],[],{"date":140,"score":86,"percentile":141},"2026-09-19",0.54321,[143,147,150,154,157,160,164,168,171,174,177,180,183,186,189,192,194,197,200,203,206,209,212,215,218,221,224,227,230,233,236,239,243,246,249,252,255,258,261,264,267,270,273,276,278,281,284,287,290,293,296,299,302,306,309,312,315,318,321,324,327,330,333,336,339,342,345,348,352,355,358,361,364,367,370,373,376,379,382,385,388,391,394,396,399,402,405,408,411,414],{"date":144,"score":145,"percentile":146},"2026-01-28",0.00019,0.03976,{"date":148,"score":145,"percentile":149},"2026-01-29",0.03992,{"date":151,"score":152,"percentile":153},"2026-01-30",0.00045,0.13495,{"date":155,"score":152,"percentile":156},"2026-01-31",0.13501,{"date":158,"score":152,"percentile":159},"2026-02-01",0.13513,{"date":161,"score":162,"percentile":163},"2026-02-02",0.00059,0.18301,{"date":165,"score":166,"percentile":167},"2026-02-03",0.00048,0.14566,{"date":169,"score":166,"percentile":170},"2026-02-04",0.14561,{"date":172,"score":166,"percentile":173},"2026-02-05",0.14604,{"date":175,"score":166,"percentile":176},"2026-02-06",0.14624,{"date":178,"score":166,"percentile":179},"2026-02-07",0.14644,{"date":181,"score":166,"percentile":182},"2026-02-08",0.1462,{"date":184,"score":166,"percentile":185},"2026-02-09",0.14591,{"date":187,"score":166,"percentile":188},"2026-02-10",0.14516,{"date":190,"score":166,"percentile":191},"2026-02-11",0.14564,{"date":193,"score":166,"percentile":185},"2026-02-12",{"date":195,"score":166,"percentile":196},"2026-02-13",0.14593,{"date":198,"score":166,"percentile":199},"2026-02-14",0.14563,{"date":201,"score":166,"percentile":202},"2026-02-15",0.14548,{"date":204,"score":166,"percentile":205},"2026-02-16",0.14517,{"date":207,"score":166,"percentile":208},"2026-02-17",0.14491,{"date":210,"score":166,"percentile":211},"2026-02-18",0.14727,{"date":213,"score":166,"percentile":214},"2026-02-19",0.14796,{"date":216,"score":166,"percentile":217},"2026-02-20",0.14794,{"date":219,"score":166,"percentile":220},"2026-02-21",0.14787,{"date":222,"score":166,"percentile":223},"2026-02-22",0.14795,{"date":225,"score":166,"percentile":226},"2026-02-23",0.14757,{"date":228,"score":166,"percentile":229},"2026-02-24",0.14721,{"date":231,"score":166,"percentile":232},"2026-02-25",0.14672,{"date":234,"score":166,"percentile":235},"2026-02-26",0.14617,{"date":237,"score":166,"percentile":238},"2026-02-27",0.14628,{"date":240,"score":241,"percentile":242},"2026-02-28",0.00052,0.16014,{"date":244,"score":241,"percentile":245},"2026-03-01",0.16046,{"date":247,"score":241,"percentile":248},"2026-03-02",0.15981,{"date":250,"score":241,"percentile":251},"2026-03-03",0.1594,{"date":253,"score":241,"percentile":254},"2026-03-04",0.15895,{"date":256,"score":241,"percentile":257},"2026-03-05",0.15916,{"date":259,"score":241,"percentile":260},"2026-03-06",0.15915,{"date":262,"score":241,"percentile":263},"2026-03-07",0.15917,{"date":265,"score":241,"percentile":266},"2026-03-08",0.1589,{"date":268,"score":241,"percentile":269},"2026-03-09",0.15861,{"date":271,"score":241,"percentile":272},"2026-03-10",0.15856,{"date":274,"score":241,"percentile":275},"2026-03-11",0.15877,{"date":277,"score":241,"percentile":251},"2026-03-12",{"date":279,"score":241,"percentile":280},"2026-03-13",0.15965,{"date":282,"score":241,"percentile":283},"2026-03-14",0.1597,{"date":285,"score":241,"percentile":286},"2026-03-15",0.15907,{"date":288,"score":241,"percentile":289},"2026-03-16",0.15869,{"date":291,"score":241,"percentile":292},"2026-03-17",0.15847,{"date":294,"score":241,"percentile":295},"2026-03-18",0.15857,{"date":297,"score":241,"percentile":298},"2026-03-19",0.15875,{"date":300,"score":241,"percentile":301},"2026-03-20",0.15941,{"date":303,"score":304,"percentile":305},"2026-03-21",0.00021,0.05544,{"date":307,"score":304,"percentile":308},"2026-03-22",0.05539,{"date":310,"score":304,"percentile":311},"2026-03-23",0.05533,{"date":313,"score":304,"percentile":314},"2026-03-24",0.05512,{"date":316,"score":304,"percentile":317},"2026-03-25",0.05568,{"date":319,"score":304,"percentile":320},"2026-03-26",0.05613,{"date":322,"score":304,"percentile":323},"2026-03-27",0.0561,{"date":325,"score":304,"percentile":326},"2026-03-28",0.05616,{"date":328,"score":304,"percentile":329},"2026-03-29",0.05612,{"date":331,"score":304,"percentile":332},"2026-03-30",0.05597,{"date":334,"score":304,"percentile":335},"2026-03-31",0.05564,{"date":337,"score":304,"percentile":338},"2026-04-01",0.05575,{"date":340,"score":304,"percentile":341},"2026-04-02",0.05609,{"date":343,"score":304,"percentile":344},"2026-04-03",0.05627,{"date":346,"score":304,"percentile":347},"2026-04-04",0.05649,{"date":349,"score":350,"percentile":351},"2026-04-05",0.00022,0.05906,{"date":353,"score":350,"percentile":354},"2026-04-06",0.05882,{"date":356,"score":350,"percentile":357},"2026-04-07",0.05895,{"date":359,"score":350,"percentile":360},"2026-04-08",0.05933,{"date":362,"score":350,"percentile":363},"2026-04-09",0.05972,{"date":365,"score":350,"percentile":366},"2026-04-10",0.05963,{"date":368,"score":350,"percentile":369},"2026-04-11",0.05954,{"date":371,"score":350,"percentile":372},"2026-04-12",0.05944,{"date":374,"score":350,"percentile":375},"2026-04-13",0.05935,{"date":377,"score":350,"percentile":378},"2026-04-14",0.05879,{"date":380,"score":350,"percentile":381},"2026-04-15",0.05888,{"date":383,"score":350,"percentile":384},"2026-04-16",0.059,{"date":386,"score":350,"percentile":387},"2026-04-17",0.05909,{"date":389,"score":350,"percentile":390},"2026-04-18",0.05911,{"date":392,"score":350,"percentile":393},"2026-04-19",0.05898,{"date":395,"score":350,"percentile":381},"2026-04-20",{"date":397,"score":350,"percentile":398},"2026-04-21",0.06062,{"date":400,"score":350,"percentile":401},"2026-04-22",0.0607,{"date":403,"score":350,"percentile":404},"2026-04-23",0.0609,{"date":406,"score":350,"percentile":407},"2026-04-24",0.06085,{"date":409,"score":350,"percentile":410},"2026-04-25",0.06122,{"date":412,"score":350,"percentile":413},"2026-04-26",0.06115,{"date":415,"score":350,"percentile":416},"2026-04-27",0.06107,[418,423,425,427,429,431],{"source":90,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":419,"cvss_v4_0":9},{"baseScore":88,"baseSeverity":420,"vectorString":91,"impactScore":421,"exploitabilityScore":422},"MEDIUM",6,5.6,{"source":96,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":424,"cvss_v4_0":9},{"baseScore":88,"baseSeverity":420,"vectorString":91,"impactScore":421,"exploitabilityScore":422},{"source":123,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":426,"cvss_v4_0":9},{"baseScore":88,"baseSeverity":9,"vectorString":91,"impactScore":421,"exploitabilityScore":422},{"source":128,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":428,"cvss_v4_0":9},{"baseScore":88,"baseSeverity":9,"vectorString":91,"impactScore":421,"exploitabilityScore":422},{"source":97,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":430,"cvss_v4_0":9},{"baseScore":88,"baseSeverity":9,"vectorString":91,"impactScore":421,"exploitabilityScore":422},{"source":98,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":432,"cvss_v4_0":9},{"baseScore":88,"baseSeverity":9,"vectorString":91,"impactScore":421,"exploitabilityScore":422},[434,454,462,465,471,475,480,491],{"ecosystem":435,"name":436,"vendor":437,"product":436,"cpe_part":9,"purl_type":438,"purl_namespace":437,"purl_name":436,"source":9,"versions":439},"Alpine Linux","openssl","alpine","apk",[440,448,449,452,453],{"version":441,"is_range":442,"range_type":443,"version_start":444,"version_start_type":445,"version_end":446,"version_end_type":447,"fixed_in":9},"gte3_3_0_lt3_3_6_r0",true,"ecosystem","3.3.0","including","3.3.6-r0","excluding",{"version":441,"is_range":442,"range_type":443,"version_start":444,"version_start_type":445,"version_end":446,"version_end_type":447,"fixed_in":9},{"version":450,"is_range":442,"range_type":443,"version_start":444,"version_start_type":445,"version_end":451,"version_end_type":447,"fixed_in":9},"gte3_3_0_lt3_5_5_r0","3.5.5-r0",{"version":450,"is_range":442,"range_type":443,"version_start":444,"version_start_type":445,"version_end":451,"version_end_type":447,"fixed_in":9},{"version":450,"is_range":442,"range_type":443,"version_start":444,"version_start_type":445,"version_end":451,"version_end_type":447,"fixed_in":9},{"ecosystem":455,"name":456,"vendor":457,"product":456,"cpe_part":9,"purl_type":438,"purl_namespace":457,"purl_name":456,"source":9,"versions":458},"Chainguard","libcrypto3-2.34","chainguard",[459],{"version":460,"is_range":442,"range_type":443,"version_start":9,"version_start_type":9,"version_end":461,"version_end_type":447,"fixed_in":9},"lt3_6_1_r0","3.6.1-r0",{"ecosystem":455,"name":436,"vendor":457,"product":436,"cpe_part":9,"purl_type":438,"purl_namespace":457,"purl_name":436,"source":9,"versions":463},[464],{"version":460,"is_range":442,"range_type":443,"version_start":9,"version_start_type":9,"version_end":461,"version_end_type":447,"fixed_in":9},{"ecosystem":455,"name":466,"vendor":457,"product":466,"cpe_part":9,"purl_type":438,"purl_namespace":457,"purl_name":466,"source":9,"versions":467},"openssl-provider-fips-3.4.0",[468],{"version":469,"is_range":442,"range_type":443,"version_start":9,"version_start_type":9,"version_end":470,"version_end_type":447,"fixed_in":9},"lt0","0",{"ecosystem":455,"name":472,"vendor":457,"product":472,"cpe_part":9,"purl_type":438,"purl_namespace":457,"purl_name":472,"source":9,"versions":473},"openssl-provider-fips-3.6.0",[474],{"version":469,"is_range":442,"range_type":443,"version_start":9,"version_start_type":9,"version_end":470,"version_end_type":447,"fixed_in":9},{"ecosystem":476,"name":436,"vendor":477,"product":436,"cpe_part":9,"purl_type":438,"purl_namespace":477,"purl_name":436,"source":9,"versions":478},"Wolfi","wolfi",[479],{"version":460,"is_range":442,"range_type":443,"version_start":9,"version_start_type":9,"version_end":461,"version_end_type":447,"fixed_in":9},{"ecosystem":481,"name":436,"vendor":482,"product":436,"cpe_part":9,"purl_type":483,"purl_namespace":482,"purl_name":436,"source":9,"versions":484},"Debian","debian","deb",[485,488],{"version":486,"is_range":442,"range_type":443,"version_start":9,"version_start_type":9,"version_end":487,"version_end_type":447,"fixed_in":9},"lt3_5_4_1~deb13u2","3.5.4-1~deb13u2",{"version":489,"is_range":442,"range_type":443,"version_start":9,"version_start_type":9,"version_end":490,"version_end_type":447,"fixed_in":9},"lt3_5_5_1","3.5.5-1",{"ecosystem":9,"name":492,"vendor":436,"product":436,"cpe_part":493,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":494},"OpenSSL","a",[495,499,503,507],{"version":496,"is_range":442,"range_type":497,"version_start":444,"version_start_type":445,"version_end":498,"version_end_type":447,"fixed_in":9},">= 3.3.0, \u003C 3.3.6","cpe","3.3.6",{"version":500,"is_range":442,"range_type":497,"version_start":501,"version_start_type":445,"version_end":502,"version_end_type":447,"fixed_in":9},">= 3.4.0, \u003C 3.4.4","3.4.0","3.4.4",{"version":504,"is_range":442,"range_type":497,"version_start":505,"version_start_type":445,"version_end":506,"version_end_type":447,"fixed_in":9},">= 3.5.0, \u003C 3.5.5","3.5.0","3.5.5",{"version":508,"is_range":442,"range_type":497,"version_start":509,"version_start_type":445,"version_end":510,"version_end_type":447,"fixed_in":9},">= 3.6.0, \u003C 3.6.1","3.6.0","3.6.1"]