Approved changes feed: RSS · Atom

cpe:2.3:a:gabime:spdlog:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorGabime (e185d903-efd6-5837-8d3a-515ad4ea479f)
ProductSpdlog (319d4858-b6da-58f6-b0f5-845ff21dc782)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/spdlog purl2cpe 2026-06-01 10:18:20.161977
pkg:deb/ubnutu/spdlog purl2cpe 2026-06-01 10:18:20.161978
pkg:github/gabime/spdlog purl2cpe 2026-06-01 10:18:20.161980
pkg:rpm/fedora/spdlog purl2cpe 2026-06-01 10:18:20.161981
pkg:rpm/opensuse/spdlog purl2cpe 2026-06-01 10:18:20.161983
pkg:sourceforge/spdlog.mirror purl2cpe 2026-06-01 10:18:20.161984

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-6140 vulnerable 2026-06-08 07:43:14.375999 spdlog pattern_formatter-inl.h scoped_padder resource consumption
LOW (3.3)
A vulnerability, which was classified as problematic, was found in spdlog up to 1.15.1. This affects the function scoped_padder in the library include/spdlog/pattern_formatter-inl.h. The manipulation leads to resource consumption. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. Upgrading to version 1.15.2 is able to address this issue. The identifier of the patch is 10320184df1eb4638e253a34b1eb44ce78954094. It is recommended to upgrade the affected component.
Published: 2025-06-16T21:31:06.961Z
Updated: 2025-06-17T15:24:14.082Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.