Threats affecting pkg:rpm/suse/cockpit-subscriptions

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.3	EPSS 0.4%	CVE-2025-64718SUSE cockpit-subscriptions · Security update for cockpit-subscriptions Medium5.3EPSS 0.4%2026-01-27GCVE DatabaseCVE-2025-64718 A security update for cockpit-subscriptions addresses a prototype pollution vulnerability in the js-yaml library. The issue, tracked as CVE-2025-64718, was fixed in version 12.1 of cockpit-subscriptions. The vulnerability is classified with medium severity. No CVSS score is provided. EPSS 0.4%Report on CVE-2025-64718 Vulnerability SUSE Product Security Team	GCVE Database	2026-01-27

Page 1 of 1