Digest · Monday
Security digest: December 15, 2025
2 known exploited (cisa kev) additions and 2 critical advisories.
All digests · RSS · Markdown
Take stock
- Do you run any of these? Apple Multiple Products, Gladinet CentreStack and Triofox. They are being exploited in the wild (CISA KEV). Patch or mitigate if you do; CISA’s federal deadline is 2026-01-05.
- Go: 1 critical advisory (
github.com/redhat-developer/gitops-operator). Check withgovulncheck ./.... - Composer (PHP): 1 critical advisory (
getgrav/grav). Check withcomposer audit. - None of it touches your stack? Then there is nothing to do today. That is a result, not a failure to read carefully.
Known exploited (CISA KEV) 2
Added to CISA’s catalog on this day: confirmed exploitation in the wild. Due date = CISA’s deadline for US federal agencies.
| CVE | Product and flaw | CISA due |
|---|---|---|
| CVE-2025-43529 | Apple Multiple Products Apple Multiple Products Use-After-Free WebKit Vulnerability | 2026-01-05 |
| CVE-2025-14611 | Gladinet CentreStack and Triofox Gladinet CentreStack and Triofox Hard Coded Cryptographic Vulnerability | 2026-01-05 |
Critical advisories by ecosystem 2
GitHub-reviewed advisories rated critical, published this day (Pacific time).
Composer (PHP) 1
Check: composer audit
- Grav may be vulnerable to SSRF attack via Twig Templates CVE-2025-66844 CVSS 9.1 Critical
getgrav/grav<= 1.7.49.5 → no fix listed
Go 1
Check: govulncheck ./...
- OpenShift GitOps authenticated attackers can obtain cluster root access through forged ArgoCD custom resources CVE-2025-13888 CVSS 9.1 Critical
github.com/redhat-developer/gitops-operator< 1.16.2 → fixed in 1.16.2