What’s Vulnerable › Products

CISA Thorium vulnerabilities

7 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 7 published in the last 12 months.

Check whether your CISA Thorium version is affected

Latest CISA Thorium vulnerabilities

• CVE-2025-35436 — CISA Thorium account verification email error handling (CVSS 7.5)
• CVE-2025-35435 — CISA Thorium download stream divide by zero (CVSS 4.3)
• CVE-2025-35434 — CISA Thorium does not validate TLS connections to Elasticsearch (CVSS 9.8)
• CVE-2025-35433 — CISA Thorium does not properly invalidate previously used tokens (CVSS 8.8)
• CVE-2025-35432 — CISA Thorium does not rate limit account verification email messages (CVSS 7.5)
• CVE-2025-35431 — CISA Thorium LDAP injection (CVSS 5.4)
• CVE-2025-35430 — CISA Thorium insecure downloaded file path validation (CVSS 6.5)