Patchwire CVEs, their patch status, and feeds to follow them

CVE-2025-6203

Fixed in a distro release EPSS <1%CVSS 7.5

A malicious user may submit a specially-crafted complex payload that otherwise meets the default request size limit which results in excessive memory and CPU consumption of Vault. This may lead to a timeout in Vault’s auditing subroutine, potentially resulting in the Vault server to become unresponsive. This vulnerability, CVE-2025-6203, is fixed in Vault Community Edition 1.20.3 and Vault Enterprise 1.20.3, 1.19.9, 1.18.14, and 1.16.25.

Published 2025-08-28 · CVE record · OSV

Products: HashiCorp Vault, HashiCorp Vault Enterprise

Fixed upstream

EcosystemPackageFixed in
Gogithub.com/hashicorp/vault1.20.3

Distro releases

ReleasePackageFixed in
Chainguardsplunk-otel-collector0.132.0-r2
Chainguardsplunk-otel-collector-compat0.132.0-r2
Chainguardsplunk-otel-collector-doc0.132.0-r2
Chainguardsplunk-otel-collector-fips0.132.0-r1
Chainguardsplunk-otel-collector-migratecheckpoint0.132.0-r2
Chainguardsplunk-otel-collector-migratecheckpoint-compat0.132.0-r2
Chainguardvault-1.16no fix
Chainguardvault-1.16-compat1.16.3-r26
Chainguardvault-1.17no fix
Chainguardvault-1.17-compat1.17.6-r18
Chainguardvault-1.18no fix
Chainguardvault-1.18-compat1.18.5-r15
Chainguardvault-1.19no fix
Chainguardvault-1.19-compat1.19.5-r5
Chainguardvault-1.201.20.4-r2
Chainguardvault-fips-1.19-compat1.19.5-r8
SUSE Linux Enterprise Module for Package Hub 15 SP6govulncheck-vulndb0.0.20250918T182144-150000.1.107.1
Wolfisplunk-otel-collector0.132.0-r2
Wolfisplunk-otel-collector-compat0.132.0-r2
Wolfisplunk-otel-collector-doc0.132.0-r2
Wolfisplunk-otel-collector-migratecheckpoint0.132.0-r2
Wolfisplunk-otel-collector-migratecheckpoint-compat0.132.0-r2
openSUSE Leap 15.6govulncheck-vulndb0.0.20250918T182144-150000.1.107.1
openSUSE Leap 16.0govulncheck-vulndb0.0.20260723T184607-160000.1.1
openSUSE Tumbleweedgovulncheck-vulndb0.0.20250908T141310-1.1
openSUSE Tumbleweedopenbao2.4.1-1.1