CISA Thorium vulnerabilities

Newest CVEs

• CVE-2025-35436

  CISA Thorium account verification email error handling

  CISA · Thorium

  Medium6.9
• CVE-2025-35435

  CISA Thorium download stream divide by zero

  CISA · Thorium

  Medium5.3
• CVE-2025-35434

  CISA Thorium does not validate TLS connections to Elasticsearch

  CISA · Thorium

  Low2.3
• CVE-2025-35433

  CISA Thorium does not properly invalidate previously used tokens

  CISA · Thorium

  Low2.3
• CVE-2025-35432

  CISA Thorium does not rate limit account verification email messages

  CISA · Thorium

  Medium6.9
• CVE-2025-35431

  CISA Thorium LDAP injection

  CISA · Thorium

  Medium5.3
• CVE-2025-35430

  CISA Thorium insecure downloaded file path validation

  CISA · Thorium

  Medium5.3