Msrc Cbl2 Mysql 8.0.44-2 On Cbl Mariner 2.0 vulnerabilities

2 known vulnerabilities affecting msrc/cbl2_mysql_8.0.44-2_on_cbl_mariner_2.0.

Total CVEs

2

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

MEDIUM2

Vulnerabilities

Page 1 of 1

CVE-2025-10966MEDIUMCVSS 6.82025-11-11

CVE-2025-10966 [MEDIUM] missing SFTP host verification with wolfSSH missing SFTP host verification with wolfSSH Mariner: Mariner curl: curl Customer Action Required: Yes Remediation: CBL-Mariner Releases Reference: https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade

CVE-2025-62813MEDIUMCVSS 5.92025-10-14

CVE-2025-62813 [MEDIUM] CWE-158 LZ4 through 1.10.0 allows attackers to cause a denial of service (application crash) or possibly have unspecified other impact when the application processes untrusted LZ4 frames. For example, LZ4F_cr LZ4 through 1.10.0 allows attackers to cause a denial of service (application crash) or possibly have unspecified other impact when the application processes untrusted LZ4 frames. For example, LZ4F_createCDict_advanced in lib/lz4frame.c mishandles NULL checks. FAQ: