CVE-2025-14551
1 advisory.
PyPI/subiquity CVE-2025-14551: high 8.1, EPSS 0.28%
In Ubuntu, Subiquity version 24.04.4 could leak sensitive user credentials during crash reporting. Upon installation failure, if a user submitted a bug report to Launchpad, Subiquity could include cer
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 24.04.4 |
Fixed versions
No fixed version in the source.
Sources
- osv: PYSEC-2026-135
- https://github.com/canonical/subiquity/pull/2357
- https://github.com/canonical/subiquity/pull/2358
CVE-2025-14551 · published · modified · JSON