{"schemaVersion":3,"id":"CVE-2025-53864","aliases":["UBUNTU-CVE-2025-53864","CGA-22p2-rrh9-9hj4","CGA-2cm5-wgxw-rgq6","CGA-2g8x-q9xr-hv43","CGA-3gfx-5q6w-m3g5","CGA-3hw6-p4vh-fxhf","CGA-4m8c-57v5-3fm8","CGA-4x4r-2p58-fcmp","CGA-4x5h-ccxq-f2p2","CGA-55rr-63j4-w2w7","CGA-58x2-vrqj-ph99","CGA-5gc7-pjpc-v568","CGA-5gvg-hmgw-p69r","CGA-5wx3-64rp-m4rc","CGA-6hcx-242f-gcwc","CGA-6vf5-78w8-g95r","CGA-6xq3-9h7p-4fgp","CGA-7cr2-4337-7f38","CGA-8fh9-qxgw-6w4w","CGA-8hvj-h28r-wp43","CGA-8p82-ww98-fqcx","CGA-8vf2-rw29-5r4j","CGA-933w-p662-rm6m","CGA-c2v4-r4m9-m34p","CGA-cgvq-qg9r-8r5w","CGA-cr5f-h7xj-6pvx","CGA-cx44-fqq7-7j2h","CGA-f54q-8xhp-hx5q","CGA-ffq4-6355-wwgh","CGA-fhmm-pg5w-8cf8","CGA-fwg3-88px-cp7g","CGA-g23x-cpqq-4625","CGA-g2j2-gvj5-xpfr","CGA-g4ww-m635-j4xh","CGA-gjrx-8fr9-8rmm","CGA-gqr4-jwm9-75w5","CGA-h46q-3xvh-4j78","CGA-hc4m-4336-32xw","CGA-hj46-q7vg-2qmx","CGA-m22v-c78m-6pw2","CGA-m75c-2rp9-8cxj","CGA-m97p-ggv2-76x9","CGA-m9cg-xcxp-x62j","CGA-p94j-w2pc-h6f7","CGA-pjrp-qrhw-7q92","CGA-pp82-jpf9-p6mh","CGA-q34c-jcq2-p7p7","CGA-qhh7-whfg-7rfm","CGA-rpg4-3867-4r89","CGA-rwm5-mjm4-q8v2","CGA-vx4j-mjhr-jvx9","CGA-xxfc-x755-mrpp","CGA-23r9-xq77-fmcx","CGA-3324-h89c-jwg3","CGA-3c6p-3854-6pjh","CGA-3g53-73fx-3985","CGA-4gx5-qf7x-2q4c","CGA-4h73-g58c-696h","CGA-4jjg-vh2c-rr98","CGA-5mfc-x5q8-x8p4","CGA-5mx6-45f3-r2jh","CGA-5pqr-8wp4-466j","CGA-5wwj-qjwx-h258","CGA-6gpg-v5fp-7fww","CGA-6wvc-58mj-843r","CGA-72gc-w4j4-9pc5","CGA-7jx9-8c69-777m","CGA-7p92-68hj-4f5x","CGA-85x7-c8fx-9gp4","CGA-8fqg-q2jq-hg7g","CGA-8w4r-qf5w-vph6","CGA-c3j2-x27q-47h9","CGA-c5jv-62gq-3mqc","CGA-c5x4-j4vf-rmh3","CGA-cjff-qp25-52xg","CGA-crhv-5qf8-j59r","CGA-cv6v-2fqr-248c","CGA-fj68-4xj4-f2fx","CGA-g292-jq3g-qh4q","CGA-gcrp-cq2m-66fp","CGA-gw3r-xg5w-g4w6","CGA-h3xr-h7ww-5wx2","CGA-hhj5-j6hj-927g","CGA-hqrx-m4cr-r3pr","CGA-hr29-wx3r-phm2","CGA-m4hc-hqw4-mpqh","CGA-mhmw-c2hm-c69r","CGA-mq2g-97j5-wpwj","CGA-p4hv-prwv-wxpr","CGA-pjj7-j3cx-c7gj","GHSA-xwmg-2g98-w7v9","CGA-q8mp-7cfp-799q","CGA-qjm3-h4mm-6qjw","CGA-qp5m-cvwv-j628","CGA-r3r9-28q5-qmx5","CGA-rjcm-v7fw-5xgp","CGA-rrw5-7j76-xq4c","CGA-vcvq-x82h-9hf9","CGA-w7cg-9gqv-72gr","CGA-w9gm-x8x8-h7w3","CGA-wh73-c8jc-5hm5","CGA-wrjp-2v58-9qx9","CGA-x6w7-92qp-mf8p","CGA-xf4r-pg5p-6v58","CGA-xf9r-4xpr-xgvj"],"status":"published","duplicateOf":null,"title":null,"description":"Connect2id Nimbus JOSE + JWT 10.0.x before 10.0.2 and 9.37.x before 9.37.4 allows a remote attacker to cause a denial of service via a deeply nested JSON object supplied in a JWT claim set, because of uncontrolled recursion. NOTE: this is independent of the Gson 2.11.0 issue because the Connect2id product could have checked the JSON object nesting depth, regardless of what limits (if any) were imposed by Gson.","dates":{"published":"2025-07-11T00:00:00.000Z","modified":"2025-09-23T18:38:15.547Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":5.8,"severity":"medium","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":5.8,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Ubuntu","score":5.8,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L","exploitability":10,"impact":2.3,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Wolfi","score":5.8,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L","exploitability":10,"impact":2.3,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Chainguard","score":5.8,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L","exploitability":10,"impact":2.3,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Maven","score":5.8,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L","exploitability":10,"impact":2.3,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":5.8,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00981,"percentile":0.6164,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0.13499999999999987,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.00846},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00846,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00846,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00846,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00846,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00846,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00846,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00846,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00846,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00846,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00846,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00846,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00846,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00846,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00846,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00846,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00846,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00846,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00846,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00913,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00913,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00913,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00913,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00913,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00913,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00913,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00913,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00913,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00913,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00981,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00981,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00981,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00981,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00981,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00981,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00981,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00981,"percentile":0.6164}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.00846,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00846,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00846,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00846,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00846,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00846,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00846,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00846,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00846,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00846,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00846,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00846,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00846,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00913,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00913,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00913,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00913,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00913,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00913,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00913,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00913,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00913,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00913,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00981,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00981,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00981,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00981,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00981,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00981,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00981,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00981,"percentile":0.6164}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-674","name":"Uncontrolled Recursion","description":"The product does not properly control the amount of recursion that takes place,  consuming excessive resources, such as allocated memory or the program stack.","type":"weakness","status":"Draft","abstraction":"Class","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/674.html"}],"affected":[{"vendor":"chainguard","product":"akhq","name":"akhq","label":"akhq","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/akhq","purlType":"apk","versions":[{"text":"< 0.26.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.26.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"apache-nifi","name":"apache-nifi","label":"apache-nifi","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/apache-nifi","purlType":"apk","versions":[{"text":"< 2.4.0-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.4.0-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"apache-nifi-compat","name":"apache-nifi-compat","label":"apache-nifi-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/apache-nifi-compat","purlType":"apk","versions":[{"text":"< 2.4.0-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.4.0-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"apache-nifi-registry","name":"apache-nifi-registry","label":"apache-nifi-registry","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/apache-nifi-registry","purlType":"apk","versions":[{"text":"< 2.4.0-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.4.0-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"apache-nifi-registry-toolkit","name":"apache-nifi-registry-toolkit","label":"apache-nifi-registry-toolkit","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/apache-nifi-registry-toolkit","purlType":"apk","versions":[{"text":"< 2.4.0-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.4.0-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"apache-nifi-toolkit","name":"apache-nifi-toolkit","label":"apache-nifi-toolkit","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/apache-nifi-toolkit","purlType":"apk","versions":[{"text":"< 2.4.0-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.4.0-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"apicurio-registry","name":"apicurio-registry","label":"apicurio-registry","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/apicurio-registry","purlType":"apk","versions":[{"text":"< 3.0.9-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.0.9-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"apicurio-registry-nginx-config","name":"apicurio-registry-nginx-config","label":"apicurio-registry-nginx-config","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/apicurio-registry-nginx-config","purlType":"apk","versions":[{"text":"< 3.0.9-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.0.9-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"apicurio-registry-ui","name":"apicurio-registry-ui","label":"apicurio-registry-ui","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/apicurio-registry-ui","purlType":"apk","versions":[{"text":"< 3.0.9-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.0.9-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"camunda-zeebe-8.6","name":"camunda-zeebe-8.6","label":"camunda-zeebe-8.6","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/camunda-zeebe-8.6","purlType":"apk","versions":[{"text":"< 8.6.21-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.6.21-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"camunda-zeebe-8.6-compat","name":"camunda-zeebe-8.6-compat","label":"camunda-zeebe-8.6-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/camunda-zeebe-8.6-compat","purlType":"apk","versions":[{"text":"< 8.6.21-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.6.21-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"camunda-zeebe-8.7","name":"camunda-zeebe-8.7","label":"camunda-zeebe-8.7","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/camunda-zeebe-8.7","purlType":"apk","versions":[{"text":"< 8.7.7-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.7.7-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"camunda-zeebe-8.7-compat","name":"camunda-zeebe-8.7-compat","label":"camunda-zeebe-8.7-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/camunda-zeebe-8.7-compat","purlType":"apk","versions":[{"text":"< 8.7.7-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.7.7-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"celeborn-0.5","name":"celeborn-0.5","label":"celeborn-0.5","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/celeborn-0.5","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"celeborn-0.6","name":"celeborn-0.6","label":"celeborn-0.6","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/celeborn-0.6","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"celeborn-0.7","name":"celeborn-0.7","label":"celeborn-0.7","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/celeborn-0.7","purlType":"apk","versions":[{"text":"< 0.7.0-r11","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.7.0-r11","eol":null,"hubHref":null},{"vendor":"chainguard","product":"dependency-track","name":"dependency-track","label":"dependency-track","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/dependency-track","purlType":"apk","versions":[{"text":"< 4.14.2-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.14.2-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"dependency-track-bundled","name":"dependency-track-bundled","label":"dependency-track-bundled","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/dependency-track-bundled","purlType":"apk","versions":[{"text":"< 4.14.2-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.14.2-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"druid","name":"druid","label":"druid","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/druid","purlType":"apk","versions":[{"text":"< 37.0.0-r14","noFixRecorded":false,"fixedIn":null},{"text":"< 37.0.0-r56","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 37.0.0-r14 | < 37.0.0-r56","eol":null,"hubHref":null},{"vendor":"chainguard","product":"elasticsearch-7","name":"elasticsearch-7","label":"elasticsearch-7","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/elasticsearch-7","purlType":"apk","versions":[{"text":"< 7.17.29-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.17.29-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"elasticsearch-7-iamguarded","name":"elasticsearch-7-iamguarded","label":"elasticsearch-7-iamguarded","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/elasticsearch-7-iamguarded","purlType":"apk","versions":[{"text":"< 7.17.29-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.17.29-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"flyway","name":"flyway","label":"flyway","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/flyway","purlType":"apk","versions":[{"text":"< 11.16.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 11.16.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"hadoop-client-modules","name":"hadoop-client-modules","label":"hadoop-client-modules","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/hadoop-client-modules","purlType":"apk","versions":[{"text":"< 3.3.6-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.3.6-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"hadoop-fips-3.3.6","name":"hadoop-fips-3.3.6","label":"hadoop-fips-3.3.6","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/hadoop-fips-3.3.6","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-8-with-output-opensearch","name":"logstash-8-with-output-opensearch","label":"logstash-8-with-output-opensearch","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-8-with-output-opensearch","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"nacos","name":"nacos","label":"nacos","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/nacos","purlType":"apk","versions":[{"text":"< 3.2.0-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.2.0-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"nacos-docker","name":"nacos-docker","label":"nacos-docker","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/nacos-docker","purlType":"apk","versions":[{"text":"< 3.2.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.2.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"ranger","name":"ranger","label":"ranger","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/ranger","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 2.9.0-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 2.9.0-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"solr-9-full","name":"solr-9-full","label":"solr-9-full","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/solr-9-full","purlType":"apk","versions":[{"text":"< 9.10.1-r13","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.10.1-r13","eol":null,"hubHref":null},{"vendor":"chainguard","product":"solr-fips-9-full","name":"solr-fips-9-full","label":"solr-fips-9-full","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/solr-fips-9-full","purlType":"apk","versions":[{"text":"< 9.10.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.10.1-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"spark-3.5-scala-2.12","name":"spark-3.5-scala-2.12","label":"spark-3.5-scala-2.12","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/spark-3.5-scala-2.12","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"spark-3.5-scala-2.13","name":"spark-3.5-scala-2.13","label":"spark-3.5-scala-2.13","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/spark-3.5-scala-2.13","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"spark-4.0-scala-2.13","name":"spark-4.0-scala-2.13","label":"spark-4.0-scala-2.13","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/spark-4.0-scala-2.13","purlType":"apk","versions":[{"text":"< 4.0.3-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.0.3-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"spark-4.1","name":"spark-4.1","label":"spark-4.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/spark-4.1","purlType":"apk","versions":[{"text":"< 4.1.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.1.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"spark-4.1-scala-2.13","name":"spark-4.1-scala-2.13","label":"spark-4.1-scala-2.13","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/spark-4.1-scala-2.13","purlType":"apk","versions":[{"text":"< 4.1.2-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.1.2-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"spark-fips-3.5-scala-2.12","name":"spark-fips-3.5-scala-2.12","label":"spark-fips-3.5-scala-2.12","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/spark-fips-3.5-scala-2.12","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"spark-fips-3.5-scala-2.13","name":"spark-fips-3.5-scala-2.13","label":"spark-fips-3.5-scala-2.13","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/spark-fips-3.5-scala-2.13","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"tez","name":"tez","label":"tez","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/tez","purlType":"apk","versions":[{"text":"< 0.10.5-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.10.5-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wildfly","name":"wildfly","label":"wildfly","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wildfly","purlType":"apk","versions":[{"text":"< 36.0.1-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 36.0.1-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wildfly-openjdk-17","name":"wildfly-openjdk-17","label":"wildfly-openjdk-17","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wildfly-openjdk-17","purlType":"apk","versions":[{"text":"< 36.0.1-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 36.0.1-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wildfly-openjdk-17-compat","name":"wildfly-openjdk-17-compat","label":"wildfly-openjdk-17-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wildfly-openjdk-17-compat","purlType":"apk","versions":[{"text":"< 36.0.1-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 36.0.1-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wildfly-openjdk-21","name":"wildfly-openjdk-21","label":"wildfly-openjdk-21","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wildfly-openjdk-21","purlType":"apk","versions":[{"text":"< 36.0.1-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 36.0.1-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wildfly-openjdk-21-compat","name":"wildfly-openjdk-21-compat","label":"wildfly-openjdk-21-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wildfly-openjdk-21-compat","purlType":"apk","versions":[{"text":"< 36.0.1-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 36.0.1-r6","eol":null,"hubHref":null},{"vendor":"wolfi","product":"akhq","name":"akhq","label":"akhq","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/akhq","purlType":"apk","versions":[{"text":"< 0.26.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.26.0-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"apache-nifi","name":"apache-nifi","label":"apache-nifi","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/apache-nifi","purlType":"apk","versions":[{"text":"< 2.4.0-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.4.0-r6","eol":null,"hubHref":null},{"vendor":"wolfi","product":"apache-nifi-compat","name":"apache-nifi-compat","label":"apache-nifi-compat","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/apache-nifi-compat","purlType":"apk","versions":[{"text":"< 2.4.0-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.4.0-r6","eol":null,"hubHref":null},{"vendor":"wolfi","product":"apache-nifi-registry","name":"apache-nifi-registry","label":"apache-nifi-registry","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/apache-nifi-registry","purlType":"apk","versions":[{"text":"< 2.4.0-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.4.0-r4","eol":null,"hubHref":null},{"vendor":"wolfi","product":"apache-nifi-registry-toolkit","name":"apache-nifi-registry-toolkit","label":"apache-nifi-registry-toolkit","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/apache-nifi-registry-toolkit","purlType":"apk","versions":[{"text":"< 2.4.0-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.4.0-r4","eol":null,"hubHref":null},{"vendor":"wolfi","product":"apache-nifi-toolkit","name":"apache-nifi-toolkit","label":"apache-nifi-toolkit","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/apache-nifi-toolkit","purlType":"apk","versions":[{"text":"< 2.4.0-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.4.0-r6","eol":null,"hubHref":null},{"vendor":"wolfi","product":"apicurio-registry","name":"apicurio-registry","label":"apicurio-registry","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/apicurio-registry","purlType":"apk","versions":[{"text":"< 3.0.9-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.0.9-r6","eol":null,"hubHref":null},{"vendor":"wolfi","product":"apicurio-registry-nginx-config","name":"apicurio-registry-nginx-config","label":"apicurio-registry-nginx-config","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/apicurio-registry-nginx-config","purlType":"apk","versions":[{"text":"< 3.0.9-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.0.9-r6","eol":null,"hubHref":null},{"vendor":"wolfi","product":"apicurio-registry-ui","name":"apicurio-registry-ui","label":"apicurio-registry-ui","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/apicurio-registry-ui","purlType":"apk","versions":[{"text":"< 3.0.9-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.0.9-r6","eol":null,"hubHref":null},{"vendor":"wolfi","product":"celeborn-0.6","name":"celeborn-0.6","label":"celeborn-0.6","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/celeborn-0.6","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"dependency-track","name":"dependency-track","label":"dependency-track","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/dependency-track","purlType":"apk","versions":[{"text":"< 4.14.2-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.14.2-r4","eol":null,"hubHref":null},{"vendor":"wolfi","product":"dependency-track-bundled","name":"dependency-track-bundled","label":"dependency-track-bundled","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/dependency-track-bundled","purlType":"apk","versions":[{"text":"< 4.14.2-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.14.2-r4","eol":null,"hubHref":null},{"vendor":"wolfi","product":"druid","name":"druid","label":"druid","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/druid","purlType":"apk","versions":[{"text":"< 37.0.0-r14","noFixRecorded":false,"fixedIn":null},{"text":"< 37.0.0-r56","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 37.0.0-r14 | < 37.0.0-r56","eol":null,"hubHref":null},{"vendor":"wolfi","product":"flyway","name":"flyway","label":"flyway","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/flyway","purlType":"apk","versions":[{"text":"< 11.16.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 11.16.0-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"logstash-8-with-output-opensearch","name":"logstash-8-with-output-opensearch","label":"logstash-8-with-output-opensearch","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/logstash-8-with-output-opensearch","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"spark-4.0-scala-2.13","name":"spark-4.0-scala-2.13","label":"spark-4.0-scala-2.13","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/spark-4.0-scala-2.13","purlType":"apk","versions":[{"text":"< 4.0.3-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.0.3-r2","eol":null,"hubHref":null},{"vendor":"wolfi","product":"spark-4.1","name":"spark-4.1","label":"spark-4.1","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/spark-4.1","purlType":"apk","versions":[{"text":"< 4.1.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.1.0-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"spark-4.1-scala-2.13","name":"spark-4.1-scala-2.13","label":"spark-4.1-scala-2.13","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/spark-4.1-scala-2.13","purlType":"apk","versions":[{"text":"< 4.1.2-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.1.2-r5","eol":null,"hubHref":null},{"vendor":"wolfi","product":"tez","name":"tez","label":"tez","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/tez","purlType":"apk","versions":[{"text":"< 0.10.5-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.10.5-r3","eol":null,"hubHref":null},{"vendor":"wolfi","product":"wildfly","name":"wildfly","label":"wildfly","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/wildfly","purlType":"apk","versions":[{"text":"< 36.0.1-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 36.0.1-r6","eol":null,"hubHref":null},{"vendor":"wolfi","product":"wildfly-openjdk-17","name":"wildfly-openjdk-17","label":"wildfly-openjdk-17","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/wildfly-openjdk-17","purlType":"apk","versions":[{"text":"< 36.0.1-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 36.0.1-r6","eol":null,"hubHref":null},{"vendor":"wolfi","product":"wildfly-openjdk-17-compat","name":"wildfly-openjdk-17-compat","label":"wildfly-openjdk-17-compat","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/wildfly-openjdk-17-compat","purlType":"apk","versions":[{"text":"< 36.0.1-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 36.0.1-r6","eol":null,"hubHref":null},{"vendor":"wolfi","product":"wildfly-openjdk-21","name":"wildfly-openjdk-21","label":"wildfly-openjdk-21","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/wildfly-openjdk-21","purlType":"apk","versions":[{"text":"< 36.0.1-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 36.0.1-r6","eol":null,"hubHref":null},{"vendor":"wolfi","product":"wildfly-openjdk-21-compat","name":"wildfly-openjdk-21-compat","label":"wildfly-openjdk-21-compat","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/wildfly-openjdk-21-compat","purlType":"apk","versions":[{"text":"< 36.0.1-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 36.0.1-r6","eol":null,"hubHref":null},{"vendor":"connect2id","product":"nimbus_jose\\+jwt","name":"nimbus jose\\+jwt","label":"nimbus_jose\\+jwt","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 10.0.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 10.0.2","eol":null,"hubHref":"/vendor/connect2id/nimbus_josejwt"},{"vendor":"ubuntu","product":"libgoogle-gson-java","name":"libgoogle-gson-java","label":"libgoogle-gson-java","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/libgoogle-gson-java","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"com.nimbusds","product":"nimbus-jose-jwt","name":"com.nimbusds:nimbus-jose-jwt","label":"nimbus-jose-jwt","ecosystem":"Maven","cpePart":null,"purl":"pkg:maven/com.nimbusds/nimbus-jose-jwt","purlType":"maven","versions":[{"text":"≥ 9.38-rc1, < 10.0.2","noFixRecorded":false,"fixedIn":null},{"text":"< 9.37.4","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 9.38-rc1, < 10.0.2 | < 9.37.4","eol":null,"hubHref":null}],"affectedCount":70,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://bitbucket.org/connect2id/nimbus-jose-jwt/issues/583/stackoverflowerror-due-to-deeply-nested","label":"bitbucket.org/connect2id/nimbus-jose-jwt/issues/583/stackoverflowerror-due-to-deeply-nested","hostname":"bitbucket.org","tags":["REPORT","WEB"]},{"url":"https://github.com/google/gson/compare/gson-parent-2.11.0...gson-parent-2.12.0","label":"github.com/google/gson/compare/gson-parent-2.11.0...gson-parent-2.12.0","hostname":"github.com","tags":["REPORT","WEB"]},{"url":"https://github.com/google/gson/commit/1039427ff0100293dd3cf967a53a55282c0fef6b","label":"github.com/google/gson/commit/1039427ff0100293dd3cf967a53a55282c0fef6b","hostname":"github.com","tags":["REPORT","FIX","WEB"]},{"url":"https://bitbucket.org/connect2id/nimbus-jose-jwt/commits/f7fb882cc08f027c9ceb874acec3b51c6222861c","label":"bitbucket.org/connect2id/nimbus-jose-jwt/commits/f7fb882cc08f027c9ceb874acec3b51c6222861c","hostname":"bitbucket.org","tags":["FIX","WEB"]},{"url":"https://bitbucket.org/connect2id/nimbus-jose-jwt/issues/593/back-port-cve-2025-53864-fix-to-9x-branch","label":"bitbucket.org/connect2id/nimbus-jose-jwt/issues/593/back-port-cve-2025-53864-fix-to-9x-branch","hostname":"bitbucket.org","tags":["WEB"]},{"url":"https://ubuntu.com/security/CVE-2025-53864","label":"ubuntu.com/security/CVE-2025-53864","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-53864","label":"www.cve.org/CVERecord?id=CVE-2025-53864","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/53xxx/CVE-2025-53864.json","label":"github.com/CVEProject/cvelistV5/tree/main/cves/2025/53xxx/CVE-2025-53864.json","hostname":"github.com","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-53864","label":"nvd.nist.gov/vuln/detail/CVE-2025-53864","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://bitbucket.org/connect2id/nimbus-jose-jwt","label":"bitbucket.org/connect2id/nimbus-jose-jwt","hostname":"bitbucket.org","tags":["PACKAGE"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":["CGA-3852-7XCX-96QX","CGA-8GR5-54H9-6G76","CGA-C923-6H8P-37XC","CGA-CXQR-5R5G-9RGJ","CGA-HHM7-GJWH-XWJG","CGA-MPWH-PGHW-HW5X"]},"timeline":[{"kind":"published","date":"2025-07-11T00:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2025-09-23T18:38:15.547Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":23,"level":"low","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T04:44:54.187Z","stale":false,"partial":false}}