Fix CVE-2025-25305 CVSS score (#37530)

This commit is contained in:
Martin Hjelmare 2025-02-18 16:58:32 +01:00 committed by GitHub
parent 066d780858
commit 11e8913dd7
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -63,7 +63,7 @@ As an open source project, Home Assistant cannot offer bounties for security vul
The following is a list of past security advisories that have been published by the Home Assistant project.
**2025-02-18: SSL validation for outgoing requests in core and used libs not correct**
Severity: _High (CVSS: 3.1)_
Severity: _High (CVSS: 7.0)_
Detailed information: _[Security advisory](https://github.com/home-assistant/core/security/advisories/GHSA-m3pm-rpgg-5wj6)_
Assigned CVE: _[CVE-2025-25305](https://nvd.nist.gov/vuln/detail/CVE-2025-25305)_
Discovered by: _[ReneNulschDE](https://github.com/ReneNulschDE)_