---
title: "Security digest: February 12, 2025"
url: https://erroneo.us/security/2025-02-12/
description: "February 12, 2025 vulnerability digest: 2 CISA KEV additions (Apple, Mitel); 5 critical advisories (npm, Go, Composer (PHP)). What to patch and who can relax."
type: security-digest-day
section: "Security Digest"
date_published: 2025-02-12
date_modified: 2025-02-12
publisher: erroneo.us
author: erroneo.us Security Desk
license: All rights reserved. Quote with attribution and a link.
---

# Security digest: February 12, 2025

2 known exploited (cisa kev) additions and 5 critical advisories.

## Take stock

- Do you run any of these? Apple iOS and iPadOS, Mitel SIP Phones. They are being exploited in the wild (CISA KEV). Patch or mitigate if you do; CISA’s federal deadline is 2025-03-05.
- npm: 2 critical advisories ( elliptic , koa ). Check with npm audit (or: npm ls <package>) .
- Composer (PHP): 2 critical advisories ( islandora/crayfish , alextselegidis/easyappointments ). Check with composer audit .
- Go: 1 critical advisory ( github.com/mayswind/ezbookkeeping ). Check with govulncheck ./... .
- None of it touches your stack? Then there is nothing to do today. That is a result, not a failure to read carefully.

## Known exploited (CISA KEV)

- [CVE-2025-24200](https://erroneo.us/security/cve/CVE-2025-24200/index.md) Apple iOS and iPadOS: Apple iOS and iPadOS Incorrect Authorization Vulnerability (CISA due 2025-03-05)
- [CVE-2024-41710](https://erroneo.us/security/cve/CVE-2024-41710/index.md) Mitel SIP Phones: Mitel SIP Phones Argument Injection Vulnerability (CISA due 2025-03-05)

## Critical advisories

- [GHSA-vjh7-7g9h-fjfh](https://erroneo.us/security/ghsa/GHSA-vjh7-7g9h-fjfh/index.md) Elliptic's private key extraction in ECDSA upon signing a malformed input (e.g. a string) — npm elliptic <= 6.6.0 → 6.6.1
- [CVE-2024-57604](https://erroneo.us/security/cve/CVE-2024-57604/index.md) MaysWind ezBookkeeping has Improper Privilege Management — Go github.com/mayswind/ezbookkeeping <= 0.7.0 → no fix
- [GHSA-c2p2-hgjg-9r3f](https://erroneo.us/security/ghsa/GHSA-c2p2-hgjg-9r3f/index.md) Crayfish Allows Remote Code Execution via hypercube X-Islandora-Args Header — Composer (PHP) islandora/crayfish <= 4.0.0 → no fix
- [CVE-2024-57602](https://erroneo.us/security/cve/CVE-2024-57602/index.md) Easy!Appointments Improper Restriction of Excessive Authentication Attempts — Composer (PHP) alextselegidis/easyappointments <= 1.5.0 → no fix
- [CVE-2025-25200](https://erroneo.us/security/cve/CVE-2025-25200/index.md) Inefficient Regular Expression Complexity in koa — npm koa >= 2.0.0, < 2.15.4 → 2.15.4; npm koa >= 3.0.0-alpha.0, < 3.0.0-alpha.3 → 3.0.0-alpha.3; npm koa >= 1.0.0, < 1.7.1 → 1.7.1

---
Source page: https://erroneo.us/security/2025-02-12/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt