PatchTheCVEopenpubkey vulnerabilities and fixes
Recent CVEs affecting openpubkey, with upgrade or downgrade steps. 2 tracked.
openpubkey has 2 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 2. Most recent: 2025-05-13. Highest priority: CVE-2025-3757 (score 49/100).
- CVE-2025-4658 CRITICAL 9.8 UPGRADE UPGRADE Versions of OpenPubkey library prior to 0.10.0 contained a vulnerability that would allow a specially crafted
- CVE-2025-3757 CRITICAL 9.8 UPGRADE Versions of OpenPubkey library prior to 0.10.0 contained a vulnerability that would allow a specially crafted
FAQ
How do I fix openpubkey vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is openpubkey being exploited right now?
None of the tracked openpubkey CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which openpubkey CVE should I patch first?
CVE-2025-3757 currently ranks highest (49/100): Versions of OpenPubkey library prior to 0.10.0 contained a vulnerability that would allow a specially crafted.