CVE-2025-54059 | melange up to 0.29.4 SBOM File default permission

July 18, 2025 Yanac

A vulnerability classified as critical was found in melange up to 0.29.4. Affected by this vulnerability is an unknown functionality of the component SBOM File Handler. The manipulation leads to incorrect default permissions.

This vulnerability is known as CVE-2025-54059. An attack has to be approached locally. There is no exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More