Approved changes feed: RSS · Atom

cpe:2.3:a:pocoproject:poco:1.14.1:*:*:*:*:*:*:*

part: a version: 1.14.1 update: *

VendorPocoproject (18ec73c8-d2b9-565e-a54b-35b0c3c8a69d)
ProductPoco (ea74af2a-0e77-5409-9330-c0324d8b5b8b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/poco purl2cpe 2026-06-01 10:17:36.532454
pkg:deb/ubuntu/poco purl2cpe 2026-06-01 10:17:36.532455
pkg:github/pocoproject/poco purl2cpe 2026-06-01 10:17:36.532456
pkg:maven/org.pocoproject.twilio/twilio-poco purl2cpe 2026-06-01 10:17:36.532458
pkg:rpm/fedora/poco purl2cpe 2026-06-01 10:17:36.532459
pkg:sourceforge/poco purl2cpe 2026-06-01 10:17:36.532460
pkg:sourceforge/poco.mirror purl2cpe 2026-06-01 10:17:36.532462

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-45766 vulnerable 2026-06-08 07:25:11.080921 Details available
poco v1.14.1-release was discovered to contain weak encryption. NOTE: this issue has been disputed on the basis that key lengths are expected to be set by an application, not by this library. This dispute is subject to review under CNA rules 4.1.4, 4.1.14, and other rules; the dispute tagging is not meant to recommend an outcome for this CVE Record.
Published: 2025-08-06T00:00:00.000Z
Updated: 2025-08-17T03:57:24.360Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.