From 11e8913dd7adaa4a4110ce547e265fa0dcedd85e Mon Sep 17 00:00:00 2001 From: Martin Hjelmare Date: Tue, 18 Feb 2025 16:58:32 +0100 Subject: [PATCH] Fix CVE-2025-25305 CVSS score (#37530) --- source/security/index.markdown | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/source/security/index.markdown b/source/security/index.markdown index 62853786e4a..ec00ba65c02 100644 --- a/source/security/index.markdown +++ b/source/security/index.markdown @@ -63,7 +63,7 @@ As an open source project, Home Assistant cannot offer bounties for security vul The following is a list of past security advisories that have been published by the Home Assistant project. **2025-02-18: SSL validation for outgoing requests in core and used libs not correct** -Severity: _High (CVSS: 3.1)_ +Severity: _High (CVSS: 7.0)_ Detailed information: _[Security advisory](https://github.com/home-assistant/core/security/advisories/GHSA-m3pm-rpgg-5wj6)_ Assigned CVE: _[CVE-2025-25305](https://nvd.nist.gov/vuln/detail/CVE-2025-25305)_ Discovered by: _[ReneNulschDE](https://github.com/ReneNulschDE)_