Threats Tagged 'cve-2025-27407'
View all threats tagged with 'cve-2025-27407'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2025-27407'
Click on any threat for detailed analysis and mitigation recommendations
0 Red Hat Satellite is a system management solution that allows organizations to configure and maintain their systems without the necessity to provide public Internet access to their servers or other client systems. It performs provisioning and configuration management of predefined standard operating environments. Security Fix(es): * python-django: Potential denial-of-service vulnerability in IPv6 validation (CVE-2024-56374) * python-jinja2: Sandbox breakout through indirect reference to format method (CVE-2024-56326) * rubygem-rack: Local File Inclusion in Rack::Static (CVE-2025-27610) * rubygem-graphql: Remote code execution when loading a crafted GraphQL schema (CVE-2025-27407) Join the discussion | GCVE Database | 05/06/2025, 20:31:21 UTC Added: 06/02/2026, 21:43:41 UTC |
0 Red Hat Satellite is a system management solution that allows organizations to configure and maintain their systems without the necessity to provide public Internet access to their servers or other client systems. It performs provisioning and configuration management of predefined standard operating environments. Security Fix(es): * rubygem-rack: Local File Inclusion in Rack::Static (CVE-2025-27610) * rubygem-graphql: Remote code execution when loading a crafted GraphQL schema (CVE-2025-27407) Users of Red Hat Satellite are advised to upgrade to these updated packages, which fix these bugs. Join the discussion | GCVE Database | 04/01/2025, 15:20:14 UTC Added: 06/25/2026, 21:47:02 UTC |
0 Red Hat Satellite is a system management solution that allows organizations to configure and maintain their systems without the necessity to provide public Internet access to their servers or other client systems. It performs provisioning and configuration management of predefined standard operating environments. Security Fix(es): * rubygem-graphql: Remote code execution when loading a crafted GraphQL schema (CVE-2025-27407) * rubygem-rack: Local File Inclusion in Rack::Static (CVE-2025-27610) Users of Red Hat Satellite are advised to upgrade to these updated packages, which fix these bugs. Join the discussion | GCVE Database | 04/01/2025, 15:15:26 UTC Added: 06/25/2026, 21:47:02 UTC |
0 Red Hat Satellite is a system management solution that allows organizations to configure and maintain their systems without the necessity to provide public Internet access to their servers or other client systems. It performs provisioning and configuration management of predefined standard operating environments. Security Fix(es): * rubygem-graphql: Remote code execution when loading a crafted GraphQL schema (CVE-2025-27407) * rubygem-rack: Local File Inclusion in Rack::Static (CVE-2025-27610) * python-jinja2: Jinja has a sandbox breakout through malicious filenames (CVE-2024-56201) Users of Red Hat Satellite are advised to upgrade to these updated packages, which fix these bugs. Join the discussion | GCVE Database | 04/01/2025, 15:15:14 UTC Added: 06/02/2026, 21:43:41 UTC |
0 graphql-ruby is a Ruby implementation of GraphQL. Starting in version 1.11.5 and prior to versions 1.11.8, 1.12.25, 1.13.24, 2.0.32, 2.1.14, 2.2.17, and 2.3.21, loading a malicious schema definition in `GraphQL::Schema.from_introspection` (or `GraphQL::Schema::Loader.load`) can result in remote code execution. Any system which loads a schema by JSON from an untrusted source is vulnerable, including those that use GraphQL::Client to load external schemas via GraphQL introspection. Versions 1.11.8, 1.12.25, 1.13.24, 2.0.32, 2.1.14, 2.2.17, and 2.3.21 contain a patch for the issue. Join the discussion | CVE Database V5 | 03/12/2025, 18:15:57 UTC Added: 11/03/2025, 20:49:00 UTC |
Showing 1 to 5 of 5 results