Get real-time updates on Telegram

CGA-5m64-gx4h-7q9p

CVE-2025-71405 affects dapr-placement-fips-1.15-oci-compat. EPSS 0.00388 (percentile 0.30584), scored 2026-10-03. Fixed version: 1.15.5-r2. Fixed version: 1.14.5-r5. Fixed version: 1.15.5-r3. Fixed version: 1.15.5-r3. Fixed version: 1.15.5-r2. Fixed version: 1.15.5-r3. Fixed version: 3.5.0-r0. Fixed version: 3.5.0-r0. Fixed version: 1.70.1-r1. Fixed version: 1.70.1-r1. Fixed version: 1.70.1-r1. Fixed version: 1.14.5-r5. Fixed version: 1.15.5-r2. Fixed version: 0.28.6-r5. Fixed version: 0.28.6-r5. Fixed version: 1.15.5-r2. Fixed version: 1.14.5-r5.

Published 2026-10-05 08:15:50.872071+00:00

CVE

CVE-2025-71405

Product

dapr-placement-fips-1.15-oci-compat

CCR priority

0.1 /100 (P5)

CVSS

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N · OSV.dev

EPSS

0.00388 · percentile 0.30576 · 2026-10-04

KEV

no

Affected products

• dapr-placement-fips-1.15-oci-compat · Fixed version: 1.15.5-r2
• dapr-sentry-fips-1.14-oci-compat · Fixed version: 1.14.5-r5
• dapr-injector-1.15 · Fixed version: 1.15.5-r3
• dapr-sentry-1.15-oci-compat · Fixed version: 1.15.5-r3
• dapr-scheduler-fips-1.15-oci-compat · Fixed version: 1.15.5-r2
• dapr-sentry-1.15 · Fixed version: 1.15.5-r3
• gogatekeeper · Fixed version: 3.5.0-r0
• gogatekeeper · Fixed version: 3.5.0-r0
• rclone-fips · Fixed version: 1.70.1-r1
• rclone-compat · Fixed version: 1.70.1-r1
• rclone-compat · Fixed version: 1.70.1-r1
• dapr-scheduler-1.14 · Fixed version: 1.14.5-r5
• dapr-scheduler-fips-1.15 · Fixed version: 1.15.5-r2
• step · Fixed version: 0.28.6-r5
• step · Fixed version: 0.28.6-r5
• dapr-sentry-fips-1.15 · Fixed version: 1.15.5-r2
• dapr-sentry-1.14 · Fixed version: 1.14.5-r5

Provenance

• OSV.dev · Source record · observed 2026-10-04 23:49:35.786600+00:00 UTC
• OSV.dev · Source record · observed 2026-10-04 23:49:35.786600+00:00 UTC
• OSV.dev · Source record · observed 2026-10-04 23:49:35.786600+00:00 UTC
• OSV.dev · Source record · observed 2026-10-04 23:49:35.786600+00:00 UTC
• OSV.dev · Source record · observed 2026-10-04 23:49:35.786600+00:00 UTC
• OSV.dev · Source record · observed 2026-10-04 23:49:35.786600+00:00 UTC
• OSV.dev · Source record · observed 2026-10-04 23:49:35.786600+00:00 UTC
• OSV.dev · Source record · observed 2026-10-04 23:49:35.786600+00:00 UTC
• OSV.dev · Source record · observed 2026-10-04 23:49:35.786600+00:00 UTC
• OSV.dev · Source record · observed 2026-10-04 23:49:35.786600+00:00 UTC
• OSV.dev · Source record · observed 2026-10-04 23:49:35.786600+00:00 UTC
• OSV.dev · Source record · observed 2026-10-04 23:49:35.786600+00:00 UTC
• OSV.dev · Source record · observed 2026-10-04 23:49:35.786600+00:00 UTC
• OSV.dev · Source record · observed 2026-10-04 23:49:35.786600+00:00 UTC
• FIRST EPSS daily exploit-probability · Source record · observed 2026-10-05 08:16:32.814186+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2025-71405.html