VULNERABILITY INTELLIGENCE

CVE-2025-8454

CVSS score9.8 CRITICAL
EPSS probability0.26%
CISA KEVNot currently listed
Published2025-08-01
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

It was discovered that uscan, a tool to scan/watch upstream sources for new releases of software, included in devscripts (a collection of scripts to make the life of a Debian Package maintainer easier), skips OpenPGP verification if the upstream source is already downloaded from a previous run even if the verification failed back then.

Weakness classification

  • 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-347

Primary references