Weekly Security Roundup (2025-12-05-to-2025-12-12)

Your end-of-week security briefing: top CVEs and immediate priorities.

· 5 min read

```html Weekly Security Roundup

Weekly Security Roundup: December 5 - December 11, 2025

In this week's security roundup, we highlight critical vulnerabilities that require immediate attention from organizations and developers. The vulnerabilities identified span various platforms and software, with many rated as critical. Below is a summary of the key security alerts and digests released over the past seven days.

December 5, 2025

  • CVE_DIGEST – Security Digest
    • Severity: HIGH (max CVSS 7.5)
    • CVEs: CVE-2025-66564, CVE-2025-66506, CVE-2025-66623
    • Summary: Three critical vulnerabilities in Sigstore and Strimzi require immediate attention and patching to prevent exploitation.

December 8, 2025

  • SECURITY_ALERT – CVE-2025-67489
    • Severity: CRITICAL (max CVSS 9.8)
    • CVEs: CVE-2025-67489
    • Summary: CVE-2025-67489 CRITICAL alert. Immediate action recommended.
  • CVE_DIGEST – Security Digest
    • Severity: CRITICAL (max CVSS 9.3)
    • CVEs: CVE-2025-67494, CVE-2025-66627, CVE-2025-67495, CVE-2025-66507
    • Summary: Four critical vulnerabilities require immediate attention in Zitadel, Wasmi, and 1Panel.

December 9, 2025

  • CVE_DIGEST – Security Digest
    • Severity: CRITICAL (max CVSS 9.7)
    • CVEs: CVE-2025-67511, CVE-2025-66626, CVE-2025-67488, CVE-2025-66645
    • Summary: Critical vulnerabilities including command injection, symbolic link issues, and directory traversal demand immediate action.

December 10, 2025

  • CVE_DIGEST – Security Digest
    • Severity: HIGH (max CVSS 8.4)
    • CVEs: CVE-2025-67505, CVE-2025-66628
    • Summary: Two critical vulnerabilities demand immediate action: a race condition in Okta Java SDK and an integer overflow in ImageMagick.

December 11, 2025

  • CVE_DIGEST – Security Digest
    • Severity: HIGH (max CVSS 8)
    • CVEs: CVE-2025-67508, CVE-2025-55184
    • Summary: Critical vulnerabilities in Gardenctl and React Server Components demand immediate updates.

Top Priorities

Organizations are encouraged to prioritize the following vulnerabilities for immediate remediation:

  • CVE-2025-67489 - CRITICAL (CVSS 9.8): Immediate action required.
  • CVE-2025-67511 - CRITICAL (CVSS 9.7): Address command injection and related vulnerabilities.
  • CVE-2025-67494 - CRITICAL (CVSS 9.3): Requires urgent attention in Zitadel and Wasmi.
  • CVE-2025-67505 - HIGH (CVSS 8.4): Affects Okta Java SDK; patch recommended.
  • CVE-2025-67508 - HIGH (CVSS 8): Critical update needed for Gardenctl.

Stay vigilant and ensure your systems are up to date to mitigate these risks.

```

Keep reading