Red Hat Trusted Application Pipeline vulnerabilities

2 CVEs affecting Red Hat Trusted Application Pipeline, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-11065, published 2026-01-26.

More from Red Hat.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2025-8556, published 2025-08-06. Low severity, CVSS 3.7. EPSS: 0.5% chance of exploitation in the next 30 days. A flaw was found in CIRCL's implementation of the FourQ elliptic curve. This vulnerability allows an attacker to compromise session security via low-order point injection and incorrect point…
• CVE-2025-11065, published 2026-01-26. Medium severity, CVSS 5.3. EPSS: 0.4% chance of exploitation in the next 30 days. A flaw was found in github.com/go-viper/mapstructure/v2, in the field processing component using mapstructure.WeakDecode. This vulnerability allows information disclosure through detailed error…