{"schemaVersion":3,"id":"CVE-2025-43859","aliases":["SUSE-SU-2025:1430-1","SUSE-SU-2025:20330-1","SUSE-SU-2025:20331-1","GHSA-vqfr-h8mv-ghfj","PYSEC-2026-348","RHSA-2025:7535","RHSA-2025:7536","UBUNTU-CVE-2025-43859","USN-7503-1","DEBIAN-CVE-2025-43859","CGA-2694-8vxh-9965","CGA-2mgc-f44q-f4cv","CGA-34fj-2vc8-jq7v","CGA-38cq-cjx5-pxv9","CGA-484m-wxgm-8x83","CGA-55h9-8fxp-44x7","CGA-5c77-wv72-hjmx","CGA-65r7-v7xg-5wmg","CGA-65rr-pc6j-28f6","CGA-7hqm-fvv7-3qr7","CGA-7j2f-4q84-cx44","CGA-9pv2-5jfq-v6jv","CGA-c2jq-8wvc-3j7g","CGA-ff7c-h35v-4g2j","CGA-frw6-cpxq-3797","CGA-g296-h4g4-3575","CGA-g465-4g24-cvg2","CGA-gj38-r45g-vgq8","CGA-hmr8-cqx6-66rh","CGA-j446-598r-vfv2","CGA-j7hr-gp5g-hfwc","CGA-jwx3-v7fh-27q7","CGA-m3vr-vv4c-3354","CGA-m7j7-cw6v-qf45","CGA-mj4v-w6gj-vxfm","CGA-mv4f-43wv-x88j","CGA-p3h3-xcr7-v645","CGA-q6vg-xm7c-j6f5","CGA-qc3v-pgfq-p854","CGA-qfx3-3mrj-687r","CGA-rcw3-gh3h-g3vw","CGA-v7qx-359m-j99m","CGA-w3pc-rf46-2673","CGA-x4cm-whj7-93qc","CGA-xffm-6q4m-m77c","CGA-xx5w-p233-25xr","openSUSE-SU-2025:15032-1","CGA-2gjj-gg3f-jx34","CGA-2m3p-gh6q-mcmp","CGA-32jq-89q3-7pq5","CGA-c3jm-pcw2-hv74","CGA-cmpr-wc35-p489","CGA-cxf7-5m79-ch58","CGA-g524-3xp4-f35j","CGA-p2r7-2xh7-8xcr","CGA-rmw7-9wfw-mxmx"],"status":"published","duplicateOf":null,"title":null,"description":"h11 is a Python implementation of HTTP/1.1. Prior to version 0.16.0, a leniency in h11's parsing of line terminators in chunked-coding message bodies can lead to request smuggling vulnerabilities under certain conditions. This issue has been patched in version 0.16.0. Since exploitation requires the combination of buggy h11 with a buggy (reverse) proxy, fixing either component is sufficient to mitigate this issue.","dates":{"published":"2025-04-24T18:15:53.328Z","modified":"2025-04-24T19:02:45.130Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":9.1,"severity":"critical","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":9.1,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Pypi","score":9.1,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","exploitability":10,"impact":8.7,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Red hat","score":7.4,"severity":"high","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","exploitability":5.6,"impact":8.7,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Ubuntu","score":9.1,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","exploitability":10,"impact":8.7,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Debian","score":9.1,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","exploitability":10,"impact":8.7,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Wolfi","score":9.1,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","exploitability":10,"impact":8.7,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Chainguard","score":9.1,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","exploitability":10,"impact":8.7,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":9.1,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00584,"percentile":0.46887,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0.0029999999999999645,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.00581},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00581,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00581,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00581,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00581,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00581,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00581,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00584,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00584,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00584,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00584,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00584,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00584,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00584,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00584,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00584,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00584,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00584,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00584,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00584,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00584,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00584,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00584,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00584,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00584,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00584,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00584,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00584,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00584,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00584,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00584,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00584,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00584,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00584,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00584,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00584,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00584,"percentile":0.46887}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.00581,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00584,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00584,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00584,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00584,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00584,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00584,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00584,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00584,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00584,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00584,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00584,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00584,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00584,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00584,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00584,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00584,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00584,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00584,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00584,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00584,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00584,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00584,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00584,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00584,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00584,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00584,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00584,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00584,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00584,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00584,"percentile":0.46887}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-444","name":"Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')","description":"The product acts as an intermediary HTTP agent\n         (such as a proxy or firewall) in the data flow between two\n         entities such as a client and server, but it does not\n         interpret malformed HTTP requests or responses in ways that\n         are consistent with how the messages will be processed by\n         those entities that are at the ultimate destination.","type":"weakness","status":"Incomplete","abstraction":"Base","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/444.html"}],"affected":[{"vendor":"chainguard","product":"airflow","name":"airflow","label":"airflow","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/airflow","purlType":"apk","versions":[{"text":"< 2.10.5-r43","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.10.5-r43","eol":null,"hubHref":null},{"vendor":"chainguard","product":"airflow-bitnami-compat","name":"airflow-bitnami-compat","label":"airflow-bitnami-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/airflow-bitnami-compat","purlType":"apk","versions":[{"text":"< 2.10.5-r43","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.10.5-r43","eol":null,"hubHref":null},{"vendor":"chainguard","product":"checkov","name":"checkov","label":"checkov","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/checkov","purlType":"apk","versions":[{"text":"< 3.2.432-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.2.432-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"jupyter-base-notebook","name":"jupyter-base-notebook","label":"jupyter-base-notebook","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/jupyter-base-notebook","purlType":"apk","versions":[{"text":"< 7.4.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.4.1-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"jupyter-docker-base","name":"jupyter-docker-base","label":"jupyter-docker-base","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/jupyter-docker-base","purlType":"apk","versions":[{"text":"< 999.9.9_git20260925-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 999.9.9_git20260925-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"jupyter-docker-stacks","name":"jupyter-docker-stacks","label":"jupyter-docker-stacks","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/jupyter-docker-stacks","purlType":"apk","versions":[{"text":"< 7.3.2-r1","noFixRecorded":false,"fixedIn":null},{"text":"< 999.9.9_git20260925-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.3.2-r1 | < 999.9.9_git20260925-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kserve","name":"kserve","label":"kserve","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kserve","purlType":"apk","versions":[{"text":"< 0.16.0-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.16.0-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kserve-agent","name":"kserve-agent","label":"kserve-agent","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kserve-agent","purlType":"apk","versions":[{"text":"< 0.16.0-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.16.0-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kserve-agent-compat","name":"kserve-agent-compat","label":"kserve-agent-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kserve-agent-compat","purlType":"apk","versions":[{"text":"< 0.16.0-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.16.0-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kserve-manager","name":"kserve-manager","label":"kserve-manager","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kserve-manager","purlType":"apk","versions":[{"text":"< 0.16.0-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.16.0-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kserve-manager-compat","name":"kserve-manager-compat","label":"kserve-manager-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kserve-manager-compat","purlType":"apk","versions":[{"text":"< 0.16.0-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.16.0-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kserve-qpext","name":"kserve-qpext","label":"kserve-qpext","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kserve-qpext","purlType":"apk","versions":[{"text":"< 0.16.0-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.16.0-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kserve-qpext-compat","name":"kserve-qpext-compat","label":"kserve-qpext-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kserve-qpext-compat","purlType":"apk","versions":[{"text":"< 0.16.0-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.16.0-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kserve-router","name":"kserve-router","label":"kserve-router","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kserve-router","purlType":"apk","versions":[{"text":"< 0.16.0-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.16.0-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kserve-router-compat","name":"kserve-router-compat","label":"kserve-router-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kserve-router-compat","purlType":"apk","versions":[{"text":"< 0.16.0-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.16.0-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kserve-storage-controller","name":"kserve-storage-controller","label":"kserve-storage-controller","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kserve-storage-controller","purlType":"apk","versions":[{"text":"< 0.16.0-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.16.0-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kubeflow-pipelines-visualization-server","name":"kubeflow-pipelines-visualization-server","label":"kubeflow-pipelines-visualization-server","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kubeflow-pipelines-visualization-server","purlType":"apk","versions":[{"text":"< 2.4.1-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.4.1-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"localstack","name":"localstack","label":"localstack","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/localstack","purlType":"apk","versions":[{"text":"< 4.3.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.3.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"localstack-compat","name":"localstack-compat","label":"localstack-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/localstack-compat","purlType":"apk","versions":[{"text":"< 4.3.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.3.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"mitmproxy","name":"mitmproxy","label":"mitmproxy","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/mitmproxy","purlType":"apk","versions":[{"text":"< 12.2.1-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 12.2.1-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"nemo","name":"nemo","label":"nemo","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/nemo","purlType":"apk","versions":[{"text":"< 2.2.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.2.1-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"pgadmin4","name":"pgadmin4","label":"pgadmin4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/pgadmin4","purlType":"apk","versions":[{"text":"< 9.2-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.2-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"pgadmin4-oci-entrypoint","name":"pgadmin4-oci-entrypoint","label":"pgadmin4-oci-entrypoint","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/pgadmin4-oci-entrypoint","purlType":"apk","versions":[{"text":"< 9.2-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.2-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"reflex","name":"reflex","label":"reflex","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/reflex","purlType":"apk","versions":[{"text":"< 0.7.9-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.7.9-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"airflow","name":"airflow","label":"airflow","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/airflow","purlType":"apk","versions":[{"text":"< 2.10.5-r43","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.10.5-r43","eol":null,"hubHref":null},{"vendor":"wolfi","product":"airflow-bitnami-compat","name":"airflow-bitnami-compat","label":"airflow-bitnami-compat","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/airflow-bitnami-compat","purlType":"apk","versions":[{"text":"< 2.10.5-r43","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.10.5-r43","eol":null,"hubHref":null},{"vendor":"wolfi","product":"checkov","name":"checkov","label":"checkov","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/checkov","purlType":"apk","versions":[{"text":"< 3.2.432-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.2.432-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"jupyter-base-notebook","name":"jupyter-base-notebook","label":"jupyter-base-notebook","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/jupyter-base-notebook","purlType":"apk","versions":[{"text":"< 7.4.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.4.1-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"jupyter-docker-base","name":"jupyter-docker-base","label":"jupyter-docker-base","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/jupyter-docker-base","purlType":"apk","versions":[{"text":"< 999.9.9_git20260925-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 999.9.9_git20260925-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"jupyter-docker-stacks","name":"jupyter-docker-stacks","label":"jupyter-docker-stacks","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/jupyter-docker-stacks","purlType":"apk","versions":[{"text":"< 7.3.2-r1","noFixRecorded":false,"fixedIn":null},{"text":"< 999.9.9_git20260925-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.3.2-r1 | < 999.9.9_git20260925-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"kserve","name":"kserve","label":"kserve","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/kserve","purlType":"apk","versions":[{"text":"< 0.16.0-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.16.0-r5","eol":null,"hubHref":null},{"vendor":"wolfi","product":"kserve-agent","name":"kserve-agent","label":"kserve-agent","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/kserve-agent","purlType":"apk","versions":[{"text":"< 0.16.0-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.16.0-r5","eol":null,"hubHref":null},{"vendor":"wolfi","product":"kserve-agent-compat","name":"kserve-agent-compat","label":"kserve-agent-compat","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/kserve-agent-compat","purlType":"apk","versions":[{"text":"< 0.16.0-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.16.0-r5","eol":null,"hubHref":null},{"vendor":"wolfi","product":"kserve-manager","name":"kserve-manager","label":"kserve-manager","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/kserve-manager","purlType":"apk","versions":[{"text":"< 0.16.0-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.16.0-r5","eol":null,"hubHref":null},{"vendor":"wolfi","product":"kserve-manager-compat","name":"kserve-manager-compat","label":"kserve-manager-compat","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/kserve-manager-compat","purlType":"apk","versions":[{"text":"< 0.16.0-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.16.0-r5","eol":null,"hubHref":null},{"vendor":"wolfi","product":"kserve-qpext","name":"kserve-qpext","label":"kserve-qpext","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/kserve-qpext","purlType":"apk","versions":[{"text":"< 0.16.0-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.16.0-r5","eol":null,"hubHref":null},{"vendor":"wolfi","product":"kserve-qpext-compat","name":"kserve-qpext-compat","label":"kserve-qpext-compat","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/kserve-qpext-compat","purlType":"apk","versions":[{"text":"< 0.16.0-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.16.0-r5","eol":null,"hubHref":null},{"vendor":"wolfi","product":"kserve-router","name":"kserve-router","label":"kserve-router","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/kserve-router","purlType":"apk","versions":[{"text":"< 0.16.0-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.16.0-r5","eol":null,"hubHref":null},{"vendor":"wolfi","product":"kserve-router-compat","name":"kserve-router-compat","label":"kserve-router-compat","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/kserve-router-compat","purlType":"apk","versions":[{"text":"< 0.16.0-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.16.0-r5","eol":null,"hubHref":null},{"vendor":"wolfi","product":"kserve-storage-controller","name":"kserve-storage-controller","label":"kserve-storage-controller","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/kserve-storage-controller","purlType":"apk","versions":[{"text":"< 0.16.0-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.16.0-r5","eol":null,"hubHref":null},{"vendor":"wolfi","product":"kubeflow-pipelines-visualization-server","name":"kubeflow-pipelines-visualization-server","label":"kubeflow-pipelines-visualization-server","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/kubeflow-pipelines-visualization-server","purlType":"apk","versions":[{"text":"< 2.4.1-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.4.1-r3","eol":null,"hubHref":null},{"vendor":"wolfi","product":"mitmproxy","name":"mitmproxy","label":"mitmproxy","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/mitmproxy","purlType":"apk","versions":[{"text":"< 12.2.1-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 12.2.1-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"reflex","name":"reflex","label":"reflex","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/reflex","purlType":"apk","versions":[{"text":"< 0.7.9-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.7.9-r0","eol":null,"hubHref":null},{"vendor":"debian","product":"python-h11","name":"python-h11","label":"python-h11","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/python-h11","purlType":"deb","versions":[{"text":"< 0.14.0-1.1~deb12u1","noFixRecorded":false,"fixedIn":null},{"text":"< 0.14.0-1.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.14.0-1.1~deb12u1 | < 0.14.0-1.1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"python-h11","name":"python-h11","label":"python-h11","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/python-h11","purlType":"deb","versions":[{"text":"< 0.14.0-1ubuntu0.24.04.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.14.0-1ubuntu0.24.04.1","eol":null,"hubHref":null},{"vendor":"PyPI","product":"h11","name":"h11","label":"h11","ecosystem":"PyPI","cpePart":null,"purl":"pkg:pypi/h11","purlType":"pypi","versions":[{"text":"< 0.16.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.16.0","eol":null,"hubHref":null},{"vendor":"python-hyper","product":"h11","name":"h11","label":"h11","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 0.16.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.16.0","eol":null,"hubHref":"/vendor/python-hyper/h11"},{"vendor":"opensuse","product":"python-h11&distro=openSUSE Leap 15.6","name":"python-h11","label":"python-h11&distro=openSUSE Leap 15.6","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/python-h11&distro=openSUSE Leap 15.6","purlType":"rpm","versions":[{"text":"< 0.14.0-150400.9.6.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.14.0-150400.9.6.1","eol":null,"hubHref":null},{"vendor":"opensuse","product":"python-h11&distro=openSUSE Tumbleweed","name":"python-h11","label":"python-h11&distro=openSUSE Tumbleweed","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/python-h11&distro=openSUSE Tumbleweed","purlType":"rpm","versions":[{"text":"< 0.16.0-1.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.16.0-1.1","eol":null,"hubHref":null},{"vendor":"redhat","product":"python-h11","name":"python-h11","label":"python-h11","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/python-h11","purlType":"rpm","versions":[{"text":"< 0:0.12.0-4.el9ost","noFixRecorded":false,"fixedIn":null},{"text":"< 0:0.12.0-2.1.el9ost","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:0.12.0-4.el9ost | < 0:0.12.0-2.1.el9ost","eol":null,"hubHref":null},{"vendor":"redhat","product":"python3-h11","name":"python3-h11","label":"python3-h11","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/python3-h11","purlType":"rpm","versions":[{"text":"< 0:0.12.0-4.el9ost","noFixRecorded":false,"fixedIn":null},{"text":"< 0:0.12.0-2.1.el9ost","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:0.12.0-4.el9ost | < 0:0.12.0-2.1.el9ost","eol":null,"hubHref":null},{"vendor":"suse","product":"python-h11&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS","name":"python-h11","label":"python-h11&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/python-h11&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS","purlType":"rpm","versions":[{"text":"< 0.14.0-150400.9.6.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.14.0-150400.9.6.1","eol":null,"hubHref":null},{"vendor":"suse","product":"python-h11&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS","name":"python-h11","label":"python-h11&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/python-h11&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS","purlType":"rpm","versions":[{"text":"< 0.14.0-150400.9.6.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.14.0-150400.9.6.1","eol":null,"hubHref":null},{"vendor":"suse","product":"python-h11&distro=SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS","name":"python-h11","label":"python-h11&distro=SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/python-h11&distro=SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS","purlType":"rpm","versions":[{"text":"< 0.14.0-150400.9.6.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.14.0-150400.9.6.1","eol":null,"hubHref":null},{"vendor":"suse","product":"python-h11&distro=SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS","name":"python-h11","label":"python-h11&distro=SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/python-h11&distro=SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS","purlType":"rpm","versions":[{"text":"< 0.14.0-150400.9.6.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.14.0-150400.9.6.1","eol":null,"hubHref":null},{"vendor":"suse","product":"python-h11&distro=SUSE Linux Enterprise Module for Python 3 15 SP6","name":"python-h11","label":"python-h11&distro=SUSE Linux Enterprise Module for Python 3 15 SP6","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/python-h11&distro=SUSE Linux Enterprise Module for Python 3 15 SP6","purlType":"rpm","versions":[{"text":"< 0.14.0-150400.9.6.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.14.0-150400.9.6.1","eol":null,"hubHref":null},{"vendor":"suse","product":"python-h11&distro=SUSE Linux Enterprise Server 15 SP4-LTSS","name":"python-h11","label":"python-h11&distro=SUSE Linux Enterprise Server 15 SP4-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/python-h11&distro=SUSE Linux Enterprise Server 15 SP4-LTSS","purlType":"rpm","versions":[{"text":"< 0.14.0-150400.9.6.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.14.0-150400.9.6.1","eol":null,"hubHref":null},{"vendor":"suse","product":"python-h11&distro=SUSE Linux Enterprise Server 15 SP5-LTSS","name":"python-h11","label":"python-h11&distro=SUSE Linux Enterprise Server 15 SP5-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/python-h11&distro=SUSE Linux Enterprise Server 15 SP5-LTSS","purlType":"rpm","versions":[{"text":"< 0.14.0-150400.9.6.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.14.0-150400.9.6.1","eol":null,"hubHref":null},{"vendor":"suse","product":"python-h11&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP4","name":"python-h11","label":"python-h11&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP4","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/python-h11&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP4","purlType":"rpm","versions":[{"text":"< 0.14.0-150400.9.6.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.14.0-150400.9.6.1","eol":null,"hubHref":null},{"vendor":"suse","product":"python-h11&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP5","name":"python-h11","label":"python-h11&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP5","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/python-h11&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP5","purlType":"rpm","versions":[{"text":"< 0.14.0-150400.9.6.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.14.0-150400.9.6.1","eol":null,"hubHref":null},{"vendor":"suse","product":"python-h11&distro=SUSE Linux Micro 6.0","name":"python-h11","label":"python-h11&distro=SUSE Linux Micro 6.0","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/python-h11&distro=SUSE Linux Micro 6.0","purlType":"rpm","versions":[{"text":"< 0.16.0-1.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.16.0-1.1","eol":null,"hubHref":null},{"vendor":"suse","product":"python-h11&distro=SUSE Linux Micro 6.1","name":"python-h11","label":"python-h11&distro=SUSE Linux Micro 6.1","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/python-h11&distro=SUSE Linux Micro 6.1","purlType":"rpm","versions":[{"text":"< 0.16.0-slfo.1.1_1.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.16.0-slfo.1.1_1.1","eol":null,"hubHref":null},{"vendor":"suse","product":"python-httpcore&distro=SUSE Linux Micro 6.0","name":"python-httpcore","label":"python-httpcore&distro=SUSE Linux Micro 6.0","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/python-httpcore&distro=SUSE Linux Micro 6.0","purlType":"rpm","versions":[{"text":"< 0.16.3-7.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.16.3-7.1","eol":null,"hubHref":null},{"vendor":"suse","product":"python-httpcore&distro=SUSE Linux Micro 6.1","name":"python-httpcore","label":"python-httpcore&distro=SUSE Linux Micro 6.1","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/python-httpcore&distro=SUSE Linux Micro 6.1","purlType":"rpm","versions":[{"text":"< 0.16.3-slfo.1.1_2.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.16.3-slfo.1.1_2.1","eol":null,"hubHref":null}],"affectedCount":64,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://github.com/python-hyper/h11/security/advisories/GHSA-vqfr-h8mv-ghfj","label":"github.com/python-hyper/h11/security/advisories/GHSA-vqfr-h8mv-ghfj","hostname":"github.com","tags":["X Refsource CONFIRM","WEB","ARTICLE","REPORT","Advisory"]},{"url":"https://github.com/python-hyper/h11/commit/114803a29ce50116dc47951c690ad4892b1a36ed","label":"github.com/python-hyper/h11/commit/114803a29ce50116dc47951c690ad4892b1a36ed","hostname":"github.com","tags":["X Refsource MISC","WEB","ARTICLE","REPORT","FIX"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20251430-1/","label":"www.suse.com/support/update/announcement/2025/suse-su-20251430-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1241872","label":"bugzilla.suse.com/1241872","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2025-43859","label":"www.suse.com/security/cve/CVE-2025-43859","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520330-1/","label":"www.suse.com/support/update/announcement/2025/suse-su-202520330-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520331-1/","label":"www.suse.com/support/update/announcement/2025/suse-su-202520331-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-43859","label":"nvd.nist.gov/vuln/detail/CVE-2025-43859","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://github.com/python-hyper/h11","label":"github.com/python-hyper/h11","hostname":"github.com","tags":["PACKAGE"]},{"url":"https://pypi.org/project/h11","label":"pypi.org/project/h11","hostname":"pypi.org","tags":["PACKAGE"]},{"url":"https://github.com/advisories/GHSA-vqfr-h8mv-ghfj","label":"github.com/advisories/GHSA-vqfr-h8mv-ghfj","hostname":"github.com","tags":["Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:7535","label":"access.redhat.com/errata/RHSA-2025:7535","hostname":"access.redhat.com","tags":["Advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","label":"access.redhat.com/security/updates/classification/","hostname":"access.redhat.com","tags":["ARTICLE"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2362162","label":"bugzilla.redhat.com/show_bug.cgi?id=2362162","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_7535.json","label":"security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_7535.json","hostname":"security.access.redhat.com","tags":["Advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-43859","label":"access.redhat.com/security/cve/CVE-2025-43859","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-43859","label":"www.cve.org/CVERecord?id=CVE-2025-43859","hostname":"www.cve.org","tags":["Advisory","REPORT"]},{"url":"https://access.redhat.com/errata/RHSA-2025:7536","label":"access.redhat.com/errata/RHSA-2025:7536","hostname":"access.redhat.com","tags":["Advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_7536.json","label":"security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_7536.json","hostname":"security.access.redhat.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/CVE-2025-43859","label":"ubuntu.com/security/CVE-2025-43859","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/notices/USN-7503-1","label":"ubuntu.com/security/notices/USN-7503-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-43859","label":"security-tracker.debian.org/tracker/CVE-2025-43859","hostname":"security-tracker.debian.org","tags":["Advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/43xxx/CVE-2025-43859.json","label":"github.com/CVEProject/cvelistV5/tree/main/cves/2025/43xxx/CVE-2025-43859.json","hostname":"github.com","tags":["Advisory"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":["CGA-4GC2-JVQG-RHHF","CGA-52XM-QVWF-R5CH","CGA-6568-886H-P4M7","CGA-6C4F-HQR7-3VW2","CGA-7QWR-GGRP-XCP2","CGA-GGWP-JF43-X8C8","CGA-GV9P-2WX7-82MW"]},"timeline":[{"kind":"published","date":"2025-04-24T18:15:53.328Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2025-04-24T19:02:45.130Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":70,"level":"high","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T18:34:59.018Z","stale":false,"partial":false}}