CVE-2025-65100CWE-693

CVE-2025-65100

published November 20, 2025

CVSS
6.9
EPSS
0%
Percentile
29.9
In the wild
Unconfirmed
What it is

Isar is an integration system for automated root filesystem generation. In versions 0.11-rc1 and 0.11, defining ISAR_APT_SNAPSHOT_DATE alone does not set the correct timestamp value for security distribution, leading to missed security updates. This issue has been patched via commit 738bcbb.

The record
Technical detail
CVSS
6.9 · NONE
CVSS v4.0
Not supplied
EPSS
0.00371 · 29.9th percentile
Weakness
CWE-693 · Protection Mechanism Failure
Published
2025-11-20T00:15Z
References (3)
https://github.com/ilbers/isar/commit/3383fd808a4ced93e41e012660dfe364a3384434 · [email protected]https://github.com/ilbers/isar/commit/738bcbb716c7eb7b34cbb2293cae4f264b3925fe · [email protected]https://github.com/ilbers/isar/security/advisories/GHSA-3r9w-6cp6-7hm4 · [email protected]
EPSS history
Timeline
  • 19 NOV 18:52Z
    Security Snapshot May Use Unintended Timestamp When Only ISAR_APT_SNAPSHOT_DATE Is Set
    cvelistv5