Patchwire CVEs, their patch status, and feeds to follow them

CVE-2025-25017

Fixed in a distro release EPSS <1%CVSS 8.2

Improper Neutralization of Input During Web Page Generation in Kibana can lead to Cross-Site Scripting (XSS)

Published 2025-10-10 · CVE record · OSV

Products: Elastic Kibana

Distro releases

ReleasePackageFixed in
Chainguardkibana-8.17-bitnami8.17.10-r11
Chainguardkibana-8.18-bitnami8.18.8-r10
Chainguardkibana-8.19-bitnami8.19.11-r0