Known vulnerabilities in alloy-debuginfo

Vendor: SUSE
Software CPE: cpe:2.3:o:suse:alloy-debuginfo:*:*:*:*:*:suse_linux:*:*
Total vulnerabilities: 6
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting alloy-debuginfo alloy-debuginfo is affected by 6 known vulnerabilities: 2 medium, 4 low Critical High Medium Low

Vulnerabilities (6)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU120232 - Uncontrolled Recursion
CVE-2025-68156
CWE-674 Medium
No
No
1.12.2-150700.15.15.1 22.12.2025 SB2025122249
SB2025122250
SB2025122251
and 12 more
#VU118717 - Improper input validation
CVE-2025-47913
CWE-20 Low
No
No
1.12.1-150700.15.12.1 24.11.2025 SB2025112448
SB2025112455
SB2025112456
and 53 more
#VU118106 - UNIX Symbolic Link (Symlink) Following
CVE-2025-52565
CWE-61 Low
No
No
1.12.2-150700.15.15.1 05.11.2025 SB2025110519
SB2025110530
SB2025110545
and 38 more
#VU118105 - UNIX Symbolic Link (Symlink) Following
CVE-2025-52881
CWE-61 Low
No
No
1.12.2-150700.15.15.1 05.11.2025 SB2025110519
SB2025110530
SB2025110545
and 62 more
#VU118104 - UNIX Symbolic Link (Symlink) Following
CVE-2025-31133
CWE-61 Low
Available
No
1.12.2-150700.15.15.1 05.11.2025 SB2025110519
SB2025110530
SB2025110545
and 34 more
#VU114558 - Missing release of memory after effective lifetime
CVE-2025-58058
CWE-401 Medium
No
No
1.11.3-150700.15.9.1 29.08.2025 SB2025082919
SB2025083001
SB2025090123
and 39 more