{"schemaVersion":3,"id":"CVE-2025-25977","aliases":["UBUNTU-CVE-2025-25977","DEBIAN-CVE-2025-25977","GHSA-v2mw-5mch-w8c5","CGA-2399-r42r-j7p8","CGA-2gmv-qpm5-x7j2","CGA-2xrc-94c8-p2j9","CGA-3228-qphp-r6vq","CGA-35mp-h74h-c5wx","CGA-37xx-hp5g-r8v8","CGA-3j3h-f897-c26v","CGA-3v3f-pf2p-hqgj","CGA-4rgf-6894-wqh2","CGA-5435-r569-m6qp","CGA-564c-cp55-xff3","CGA-5f2h-w66c-5hmc","CGA-6h2r-55mw-2qm3","CGA-7459-xhqw-qr87","CGA-7g6h-v3rm-jxhm","CGA-7mrp-5fpr-92r8","CGA-7rp5-f8q2-w4c5","CGA-7x8f-7g78-c7g2","CGA-84r3-mx8f-5429","CGA-875j-jj9w-rqq7","CGA-8fp2-6w6h-8qv3","CGA-8mrp-r5qv-f5j6","CGA-8mvr-h6x7-qjmx","CGA-8w64-499w-j8rq","CGA-9246-f47p-c5m7","CGA-c5w3-g7jw-34rx","CGA-f65g-xpfc-rm2v","CGA-f92x-8m2f-76h3","CGA-g6x6-p6v8-gxp4","CGA-g7p2-q2gj-ww6q","CGA-gq75-w2rm-x4cq","CGA-hp9h-qc7r-25ww","CGA-hqx4-mfpq-x35v","CGA-j593-7rr4-24jg","CGA-jf4m-rmwg-2vhg","CGA-jf8j-whw6-gxq7","CGA-jp2p-77jw-mp4x","CGA-jr75-2w39-wwxc","CGA-mfhw-hjhj-f833","CGA-mhfw-g7rp-6c5p","CGA-p9pw-g6cv-gfgp","CGA-ppv9-cp87-wgqw","CGA-px53-9h3w-v8xx","CGA-q2cg-6c5w-82f3","CGA-q36r-cgrx-9hhp","CGA-qff7-x5fr-vmw6","CGA-qgjq-42p2-g4vw","CGA-qm3h-2q55-cc2w","CGA-qp4p-pgpv-53fj","CGA-qvqf-h8r2-c75r","CGA-qwj4-vq2r-hg8x","CGA-v76j-356c-gv5w","CGA-vf52-mh44-pjjq","CGA-w34m-7263-9jpp","CGA-wfcf-ppf8-mj5x","CGA-wv8f-2wq3-73q5","CGA-x87q-vw95-3rxp","CGA-xm2w-8x3p-3hwj","CGA-xw44-vcrc-864q","CGA-xwhh-hf4v-c4h9"],"status":"published","duplicateOf":null,"title":null,"description":"An issue in canvg v.4.0.2 allows an attacker to execute arbitrary code via the Constructor of the class StyleElement.","dates":{"published":"2025-03-10T00:00:00.000Z","modified":"2025-03-12T18:20:57.363Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":9.8,"severity":"critical","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":9.8,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Ubuntu","score":9.8,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","exploitability":10,"impact":9.8,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Debian","score":9.8,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","exploitability":10,"impact":9.8,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Npm","score":9.3,"severity":"critical","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P","exploitability":null,"impact":null,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Chainguard","score":9.8,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","exploitability":10,"impact":9.8,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":9.8,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00713,"percentile":0.53049,"severity":"low","asOf":"2026-10-21T00:00:00.000Z","change":{"pp":0.006000000000000016,"baselineDate":"2026-09-21T00:00:00.000Z","baselineScore":0.00707},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00707,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00707,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00707,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00707,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00707,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00707,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00707,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00707,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00707,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00707,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00707,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00707,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00707,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00707,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00707,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00707,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00707,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00707,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00707,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00707,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00707,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00707,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00707,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00707,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00707,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00707,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00707,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00707,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00707,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00707,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00707,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00713,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00713,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00713,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00713,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00713,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00713,"percentile":null},{"date":"2026-10-21T00:00:00.000Z","score":0.00713,"percentile":0.53049}],"last30":[{"date":"2026-09-21T00:00:00.000Z","score":0.00707,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00707,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00707,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00707,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00707,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00707,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00707,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00707,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00707,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00707,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00707,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00707,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00707,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00707,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00707,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00707,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00707,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00707,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00707,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00707,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00707,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00707,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00707,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00707,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00713,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00713,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00713,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00713,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00713,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00713,"percentile":null},{"date":"2026-10-21T00:00:00.000Z","score":0.00713,"percentile":0.53049}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[{"id":"GITHUB_CANVG_CANVG","name":"Canvg","source":"github","url":"https://github.com/canvg/canvg/issues/1749","maturity":"poc","reliabilityScore":0.3,"verified":false,"type":null,"platforms":[],"requiresAuth":null,"exploitdb":null,"metasploit":null}],"exploitCount":1,"weaknesses":[{"id":"CWE-1321","name":"Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')","description":"The product receives input from an upstream component that specifies attributes that are to be initialized or updated in an object, but it does not properly control modifications of attributes of the object prototype.","type":"weakness","status":"Incomplete","abstraction":"Variant","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/1321.html"}],"affected":[{"vendor":"chainguard","product":"opensearch-dashboards-2","name":"opensearch-dashboards-2","label":"opensearch-dashboards-2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2","purlType":"apk","versions":[{"text":"< 2.19.1-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.19.1-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-alerting-dashboards-plugin","name":"opensearch-dashboards-2-alerting-dashboards-plugin","label":"opensearch-dashboards-2-alerting-dashboards-plugin","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-alerting-dashboards-plugin","purlType":"apk","versions":[{"text":"< 2.19.1-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.19.1-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-anomaly-detection-dashboards-plugin","name":"opensearch-dashboards-2-anomaly-detection-dashboards-plugin","label":"opensearch-dashboards-2-anomaly-detection-dashboards-plugin","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-anomaly-detection-dashboards-plugin","purlType":"apk","versions":[{"text":"< 2.19.1-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.19.1-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-config","name":"opensearch-dashboards-2-config","label":"opensearch-dashboards-2-config","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-config","purlType":"apk","versions":[{"text":"< 2.19.1-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.19.1-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-dashboards-maps","name":"opensearch-dashboards-2-dashboards-maps","label":"opensearch-dashboards-2-dashboards-maps","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-dashboards-maps","purlType":"apk","versions":[{"text":"< 2.19.1-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.19.1-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-dashboards-notifications","name":"opensearch-dashboards-2-dashboards-notifications","label":"opensearch-dashboards-2-dashboards-notifications","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-dashboards-notifications","purlType":"apk","versions":[{"text":"< 2.19.1-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.19.1-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-dashboards-observability","name":"opensearch-dashboards-2-dashboards-observability","label":"opensearch-dashboards-2-dashboards-observability","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-dashboards-observability","purlType":"apk","versions":[{"text":"< 2.19.1-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.19.1-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-dashboards-query-workbench","name":"opensearch-dashboards-2-dashboards-query-workbench","label":"opensearch-dashboards-2-dashboards-query-workbench","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-dashboards-query-workbench","purlType":"apk","versions":[{"text":"< 2.19.1-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.19.1-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-dashboards-reporting","name":"opensearch-dashboards-2-dashboards-reporting","label":"opensearch-dashboards-2-dashboards-reporting","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-dashboards-reporting","purlType":"apk","versions":[{"text":"< 2.19.1-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.19.1-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-dashboards-search-relevance","name":"opensearch-dashboards-2-dashboards-search-relevance","label":"opensearch-dashboards-2-dashboards-search-relevance","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-dashboards-search-relevance","purlType":"apk","versions":[{"text":"< 2.19.1-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.19.1-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-dashboards-visualizations","name":"opensearch-dashboards-2-dashboards-visualizations","label":"opensearch-dashboards-2-dashboards-visualizations","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-dashboards-visualizations","purlType":"apk","versions":[{"text":"< 2.19.1-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.19.1-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-fips","name":"opensearch-dashboards-2-fips","label":"opensearch-dashboards-2-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips","purlType":"apk","versions":[{"text":"< 2.19.1-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.19.1-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-fips-alerting-dashboards-plugin","name":"opensearch-dashboards-2-fips-alerting-dashboards-plugin","label":"opensearch-dashboards-2-fips-alerting-dashboards-plugin","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips-alerting-dashboards-plugin","purlType":"apk","versions":[{"text":"< 2.19.1-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.19.1-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-fips-anomaly-detection-dashboards-plugin","name":"opensearch-dashboards-2-fips-anomaly-detection-dashboards-plugin","label":"opensearch-dashboards-2-fips-anomaly-detection-dashboards-plugin","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips-anomaly-detection-dashboards-plugin","purlType":"apk","versions":[{"text":"< 2.19.1-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.19.1-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-fips-config","name":"opensearch-dashboards-2-fips-config","label":"opensearch-dashboards-2-fips-config","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips-config","purlType":"apk","versions":[{"text":"< 2.19.1-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.19.1-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-fips-dashboards-maps","name":"opensearch-dashboards-2-fips-dashboards-maps","label":"opensearch-dashboards-2-fips-dashboards-maps","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips-dashboards-maps","purlType":"apk","versions":[{"text":"< 2.19.1-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.19.1-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-fips-dashboards-notifications","name":"opensearch-dashboards-2-fips-dashboards-notifications","label":"opensearch-dashboards-2-fips-dashboards-notifications","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips-dashboards-notifications","purlType":"apk","versions":[{"text":"< 2.19.1-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.19.1-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-fips-dashboards-observability","name":"opensearch-dashboards-2-fips-dashboards-observability","label":"opensearch-dashboards-2-fips-dashboards-observability","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips-dashboards-observability","purlType":"apk","versions":[{"text":"< 2.19.1-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.19.1-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-fips-dashboards-query-workbench","name":"opensearch-dashboards-2-fips-dashboards-query-workbench","label":"opensearch-dashboards-2-fips-dashboards-query-workbench","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips-dashboards-query-workbench","purlType":"apk","versions":[{"text":"< 2.19.1-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.19.1-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-fips-dashboards-reporting","name":"opensearch-dashboards-2-fips-dashboards-reporting","label":"opensearch-dashboards-2-fips-dashboards-reporting","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips-dashboards-reporting","purlType":"apk","versions":[{"text":"< 2.19.1-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.19.1-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-fips-dashboards-search-relevance","name":"opensearch-dashboards-2-fips-dashboards-search-relevance","label":"opensearch-dashboards-2-fips-dashboards-search-relevance","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips-dashboards-search-relevance","purlType":"apk","versions":[{"text":"< 2.19.1-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.19.1-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-fips-dashboards-visualizations","name":"opensearch-dashboards-2-fips-dashboards-visualizations","label":"opensearch-dashboards-2-fips-dashboards-visualizations","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips-dashboards-visualizations","purlType":"apk","versions":[{"text":"< 2.19.1-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.19.1-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-fips-index-management-dashboards-plugin","name":"opensearch-dashboards-2-fips-index-management-dashboards-plugin","label":"opensearch-dashboards-2-fips-index-management-dashboards-plugin","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips-index-management-dashboards-plugin","purlType":"apk","versions":[{"text":"< 2.19.1-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.19.1-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-fips-ml-commons-dashboards","name":"opensearch-dashboards-2-fips-ml-commons-dashboards","label":"opensearch-dashboards-2-fips-ml-commons-dashboards","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips-ml-commons-dashboards","purlType":"apk","versions":[{"text":"< 2.19.1-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.19.1-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-fips-security-analytics-dashboards-plugin","name":"opensearch-dashboards-2-fips-security-analytics-dashboards-plugin","label":"opensearch-dashboards-2-fips-security-analytics-dashboards-plugin","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips-security-analytics-dashboards-plugin","purlType":"apk","versions":[{"text":"< 2.19.1-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.19.1-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-fips-security-dashboards-plugin","name":"opensearch-dashboards-2-fips-security-dashboards-plugin","label":"opensearch-dashboards-2-fips-security-dashboards-plugin","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips-security-dashboards-plugin","purlType":"apk","versions":[{"text":"< 2.19.1-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.19.1-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-index-management-dashboards-plugin","name":"opensearch-dashboards-2-index-management-dashboards-plugin","label":"opensearch-dashboards-2-index-management-dashboards-plugin","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-index-management-dashboards-plugin","purlType":"apk","versions":[{"text":"< 2.19.1-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.19.1-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-ml-commons-dashboards","name":"opensearch-dashboards-2-ml-commons-dashboards","label":"opensearch-dashboards-2-ml-commons-dashboards","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-ml-commons-dashboards","purlType":"apk","versions":[{"text":"< 2.19.1-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.19.1-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-security-analytics-dashboards-plugin","name":"opensearch-dashboards-2-security-analytics-dashboards-plugin","label":"opensearch-dashboards-2-security-analytics-dashboards-plugin","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-security-analytics-dashboards-plugin","purlType":"apk","versions":[{"text":"< 2.19.1-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.19.1-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-security-dashboards-plugin","name":"opensearch-dashboards-2-security-dashboards-plugin","label":"opensearch-dashboards-2-security-dashboards-plugin","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-security-dashboards-plugin","purlType":"apk","versions":[{"text":"< 2.19.1-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.19.1-r2","eol":null,"hubHref":null},{"vendor":"canvg","product":"canvg","name":"canvg","label":"canvg","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 3.0.11","noFixRecorded":false,"fixedIn":null},{"text":"≥ 4.0.0, < 4.0.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.0.11 | ≥ 4.0.0, < 4.0.3","eol":null,"hubHref":"/vendor/canvg/canvg"},{"vendor":"debian","product":"znuny","name":"znuny","label":"znuny","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/znuny","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 6.5.24-1","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 6.5.24-1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"otrs2","name":"otrs2","label":"otrs2","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/otrs2","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"znuny","name":"znuny","label":"znuny","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/znuny","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"Npm","product":"canvg","name":"canvg","label":"canvg","ecosystem":"Npm","cpePart":null,"purl":"pkg:npm/canvg","purlType":"npm","versions":[{"text":"≥ 4.0.0, < 4.0.3","noFixRecorded":false,"fixedIn":null},{"text":"< 3.0.11","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 4.0.0, < 4.0.3 | < 3.0.11","eol":null,"hubHref":null}],"affectedCount":35,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://github.com/canvg/canvg/issues/1749","label":"github.com/canvg/canvg/issues/1749","hostname":"github.com","tags":["WEB","REPORT","Exploit","Issue Tracking"]},{"url":"https://ubuntu.com/security/CVE-2025-25977","label":"ubuntu.com/security/CVE-2025-25977","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-25977","label":"www.cve.org/CVERecord?id=CVE-2025-25977","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://www.znuny.org/en/releases/znuny-lts-6-5-24","label":"www.znuny.org/en/releases/znuny-lts-6-5-24","hostname":"www.znuny.org","tags":["REPORT"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-25977","label":"security-tracker.debian.org/tracker/CVE-2025-25977","hostname":"security-tracker.debian.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-25977","label":"nvd.nist.gov/vuln/detail/CVE-2025-25977","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://github.com/canvg/canvg/commit/c3743e6345f3e01aefdcdd412c3f26494f4b5d7d","label":"github.com/canvg/canvg/commit/c3743e6345f3e01aefdcdd412c3f26494f4b5d7d","hostname":"github.com","tags":["WEB"]},{"url":"https://github.com/canvg/canvg","label":"github.com/canvg/canvg","hostname":"github.com","tags":["PACKAGE"]},{"url":"https://github.com/canvg/canvg/blob/937668eced93e0335c67a255d0d2277ea708b2cb/src/Document/StyleElement.ts","label":"github.com/canvg/canvg/blob/937668eced93e0335c67a255d0d2277ea708b2cb/src/Document/StyleElement.ts","hostname":"github.com","tags":["WEB"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/25xxx/CVE-2025-25977.json","label":"github.com/CVEProject/cvelistV5/tree/main/cves/2025/25xxx/CVE-2025-25977.json","hostname":"github.com","tags":["Advisory"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":["CGA-6VJ6-VPJH-CR5F","CGA-9HG6-G388-CFQG","CGA-JX2M-57R7-MHX2"]},"timeline":[{"kind":"published","date":"2025-03-10T00:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2025-03-12T18:20:57.363Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":70,"level":"high","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T21:15:09.979Z","stale":false,"partial":false}}