Maven/org.sakaiproject.kernel:sakai-kernel-impl CVE-2025-62710: medium 5.9, EPSS 0.20%
Sakai kernel-impl: predictable PRNG used to generate server‑side encryption key in EncryptionUtilityServiceImpl
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 23.3 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-gr7h-xw4f-wh86
- https://github.com/sakaiproject/sakai/security/advisories/GHSA-gr7h-xw4f-wh86
- https://nvd.nist.gov/vuln/detail/CVE-2025-62710
- https://github.com/sakaiproject/sakai/commit/bde070104b1de01f4a6458dca6d9e0880a0e3c04
- https://github.com/sakaiproject/sakai
CVE-2025-62710 · published · modified · JSON