CVE-2025-53605

ADVISORY - github

Summary

Affected version of this crate did not properly parse unknown fields when parsing a user-supplied input.

This allows an attacker to cause a stack overflow when parsing the message on untrusted data.

EPSS Score⁠: 0.00044 (0.136)

ADVISORY - nist

Uncontrolled Recursion

ADVISORY - github

Improper Input Validation

Allocation of Resources Without Limits or Throttling

ADVISORY - gitlab

OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities

Improper Input Validation

Allocation of Resources Without Limits or Throttling

OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities

ADVISORY - redhat

Uncontrolled Recursion

See which of your images are affected by this CVE and how to fix them by signing into Docker Scout.