Security Advisory

CVE-2025-35436

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-09-17 16:53:47
Last updated 2025-09-30 16:36:16
Assigner cisa-cg
State PUBLISHED

Description

CISA Thorium uses .unwrap() to handle errors related to account verification email messages. An unauthenticated remote attacker could cause a crash by providing a specially crafted email address or response. Fixed in commit 6a65a27.