PT-2025-43298

CVE-2025-60039

·

Published

2025-10-10

·

Updated

2026-10-22

Description by

CVSS 3.1
9.8
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions rascals Noisa versions through 2.6.0
Description A flaw exists in rascals Noisa that allows for Object Injection due to deserialization of untrusted data. This issue impacts the Noisa software.
Recommendations Update to a version of rascals Noisa greater than 2.6.0.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-502: Deserialization of Untrusted Data
Related identifiers
CVE-2025-60039
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com