CVE-2025-22868
Vulnerability Summary
Timeline
Description
An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing.
CVSS Metrics
- v3.1•HIGH•Score: 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Trends
Current EPSS score: 0.85%• Percentile: 57%
Techniques & Countermeasures
- CWE-1286•Improper Validation of Syntactic Correctness of Input
The product receives input that is expected to be well-formed - i.e., to comply with a certain syntax - but it does not validate or incorrectly validates that the input complies with the syntax.
Affected Systems
- chainguard•aactl
< 0.4.12-r28
- chainguard•actions-runner-controller
< 0.10.1-r5
- chainguard•actions-runner-controller-compat
< 0.10.1-r5
- chainguard•actions-runner-controller-fips
< 0.10.1-r5
- chainguard•actions-runner-controller-fips-compat
< 0.10.1-r5
- chainguard•addon-resizer
< 1.8.23-r2
- chainguard•addon-resizer-compat
< 1.8.23-r2
- chainguard•addon-resizer-fips
< 1.8.23-r2
- chainguard•addon-resizer-fips-compat
< 1.8.23-r2
- chainguard•agentbeat-fips
< 8.17.3-r2
- chainguard•amazon-cloudwatch-agent
< 1.300053.0-r7
- chainguard•amazon-cloudwatch-agent-all
< 1.300053.0-r7
- chainguard•amazon-cloudwatch-agent-amazon-cloudwatch-agent-config-wizard
< 1.300053.0-r7
- chainguard•amazon-cloudwatch-agent-amazon-cloudwatch-agent-config-wizard-fips
< 1.300053.0-r6
- chainguard•amazon-cloudwatch-agent-compat
< 1.300053.0-r7
- chainguard•amazon-cloudwatch-agent-config-downloader
< 1.300053.0-r7
- chainguard•amazon-cloudwatch-agent-config-downloader-fips
< 1.300053.0-r6
- chainguard•amazon-cloudwatch-agent-config-translator
< 1.300053.0-r7
- chainguard•amazon-cloudwatch-agent-config-translator-fips
< 1.300053.0-r6
- chainguard•amazon-cloudwatch-agent-fips
< 1.300053.0-r6
- chainguard•amazon-cloudwatch-agent-operator
< 2.2.0-r1
- chainguard•amazon-cloudwatch-agent-operator-compat
< 2.2.0-r1
- chainguard•amazon-cloudwatch-agent-operator-fips
< 2.2.0-r0
- chainguard•amazon-cloudwatch-agent-operator-fips-compat
< 2.2.0-r0
- chainguard•amazon-cloudwatch-agent-start-amazon-cloudwatch-agent
< 1.300053.0-r7
- chainguard•amazon-cloudwatch-agent-start-amazon-cloudwatch-agent-fips
< 1.300053.0-r6
- chainguard•amazon-k8s-cni
< 1.19.3-r1
- chainguard•amazon-k8s-cni-compat
< 1.19.3-r1
- chainguard•amazon-k8s-cni-init
< 1.19.3-r1
- chainguard•amazon-k8s-cni-init-compat
< 1.19.3-r1
- chainguard•amazon-ssm-agent
< 3.3.1957.0-r4
- chainguard•amazon-ssm-agent-ecs-exec
< 3.3.1957.0-r4
- chainguard•ansible-operator
< 1.37.1-r6
- chainguard•ansible-operator-compat
< 1.37.1-r6
- chainguard•apko
< 0.25.5-r0
- chainguard•argo-cd-2.11
< 2.11.13-r5
- chainguard•argo-cd-2.13
< 2.13.5-r5
- chainguard•argo-cd-2.13-compat
< 2.13.5-r5
- chainguard•argo-cd-2.13-repo-server
< 2.13.5-r5
- chainguard•argo-cd-2.14
< 2.14.7-r0
- chainguard•argo-cd-2.14-compat
< 2.14.7-r0
- chainguard•argo-cd-2.14-repo-server
< 2.14.7-r0
- chainguard•argo-cd-fips-2.14
< 2.14.6-r0
- chainguard•argo-cd-fips-2.14-compat
< 2.14.6-r0
- chainguard•argo-cd-fips-2.14-repo-server
< 2.14.6-r0
- chainguard•argo-events
< 1.9.5-r4
- chainguard•argo-events-fips
< 1.9.5-r3
- chainguard•argo-rollouts
< 1.8.0-r32
- chainguard•argo-rollouts-fips
< 1.8.0-r3
- chainguard•argo-workflows
< 3.6.5-r2
Showing first 50 affected entries in server-rendered view.