This page tracks the BellSoft Alpaquita fix status. The vulnerability itself is described on the main CVE page.
View CVE-2025-24855 →
BELL-CVE-2025-24855
Vulnerability in libxslt (BELL-CVE-2025-24855)
Summary
Vulnerability in libxslt (BELL-CVE-2025-24855). Successful exploitation can lead to full system takeover. Mitigation: upgrade to 1.1.37-r2 or later.
Auto-generated summary
Assembled by SecPulse from the source data (CVSS, CWE, affected versions) using templates — no AI involved. Check the original description and references below for exact details.
A weakness called BELL-CVE-2025-24855 was discovered in libxslt.
Severity is Info. Low severity or not yet rated.
What you should do: update the affected software to the latest version. If unsure, ask your IT team or search the vendor's site for "libxslt BELL-CVE-2025-24855".
BELL-CVE-2025-24855 (libxslt). Severity: Info.
Response plan:
- Check the vendor advisory for affected versions and the patched release.
- If a vulnerable version is running in production, schedule maintenance (urgency from KEV/CVSS).
- If no patch yet, mitigate via WAF rule, disabling the affected feature, etc.
- Monitor logs / SIEM for known IOC and PoC signatures of this CVE.
PoCs and fix commits: see the 'References' section, MITRE, and NVD.
❓ What is the problem
A weakness (BELL-CVE-2025-24855) in libxslt. A serious software flaw has been identified.
📍 Affected scope
Target versions of libxslt (see vendor advisory). If running in production, identify exposure immediately.
🔥 Severity
Severity: Info. Low severity or not yet rated.
🔧 How to fix
Update to the patched release as listed in the vendor advisory.
🛡️ Workaround
If a patch is not yet available, consider disabling the affected feature, applying WAF rules, blocking via network ACLs, or isolating the vulnerable version.
🔍 Detection
Check version information, scan dependencies via SBOM, and monitor SIEM for IOC and PoC signatures related to this CVE.
Affected packages
Alpaquita:23
libxslt
[{"type":"ECOSYSTEM","events":[{"introduced":"1.1.37-r0"},{"fixed":"1.1.37-r2"}]}]
Alpaquita:23
openjdk11
[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.19_p7-r0"},{"fixed":"11.0.28_p12-r0"}]}]
Alpaquita:23
openjdk11-container-jre
[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.19_p7-r0"},{"fixed":"11.0.28_p12-r0"}]}]
Alpaquita:23
openjdk11-lite
[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.19_p7-r1"},{"fixed":"11.0.28_p12-r0"}]}]
Alpaquita:23
openjdk11-perf
[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.20.1_p1-r0"},{"fixed":"11.0.28_p13-r0"}]}]
Alpaquita:23
openjdk17
[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.7_p7-r1"},{"fixed":"17.0.16_p12-r0"}]}]
Alpaquita:23
openjdk17-container-jre
[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.7_p7-r0"},{"fixed":"17.0.16_p12-r0"}]}]
Alpaquita:23
openjdk17-crac
[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.13_p13-r0"},{"fixed":"17.0.16_p13-r0"}]}]
Alpaquita:23
openjdk17-lite
[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.7_p7-r1"},{"fixed":"17.0.16_p12-r0"}]}]
Alpaquita:23
openjdk21
[{"type":"ECOSYSTEM","events":[{"introduced":"21_p37-r0"},{"fixed":"21.0.8_p12-r0"}]}]
Alpaquita:23
openjdk21-container-jre
[{"type":"ECOSYSTEM","events":[{"introduced":"21_p37-r0"},{"fixed":"21.0.8_p12-r0"}]}]
Alpaquita:23
openjdk21-crac
[{"type":"ECOSYSTEM","events":[{"introduced":"21.0.5_p12-r0"},{"fixed":"21.0.8_p13-r0"}]}]
Alpaquita:23
openjdk21-lite
[{"type":"ECOSYSTEM","events":[{"introduced":"21_p37-r0"},{"fixed":"21.0.8_p12-r0"}]}]
Alpaquita:23
openjdk24
[{"type":"ECOSYSTEM","events":[{"introduced":"24_p37-r0"},{"fixed":"24.0.2_p12-r0"}]}]
Alpaquita:23
openjdk24-container-jre
[{"type":"ECOSYSTEM","events":[{"introduced":"24_p37-r0"},{"fixed":"24.0.2_p12-r0"}]}]
Alpaquita:23
openjdk24-lite
[{"type":"ECOSYSTEM","events":[{"introduced":"24_p37-r0"},{"fixed":"24.0.2_p12-r0"}]}]
Alpaquita:23
openjdk8
[{"type":"ECOSYSTEM","events":[{"introduced":"8u372_p7-r0"},{"fixed":"8.462_p11-r0"}]}]
Alpaquita:23
openjdk8-perf
[{"type":"ECOSYSTEM","events":[{"introduced":"8u392_p9-r1"},{"fixed":"8.462_p12-r0"}]}]
Alpaquita:25
openjdk11
[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.27_p9-r0"},{"fixed":"11.0.28_p12-r0"}]}]
Alpaquita:25
openjdk11-container-jre
[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.27_p9-r0"},{"fixed":"11.0.28_p12-r0"}]}]
Alpaquita:25
openjdk11-lite
[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.27_p9-r0"},{"fixed":"11.0.28_p12-r0"}]}]
Alpaquita:25
openjdk17
[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.15_p10-r1"},{"fixed":"17.0.16_p12-r0"}]}]
Alpaquita:25
openjdk17-container-jre
[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.15_p10-r0"},{"fixed":"17.0.16_p12-r0"}]}]
Alpaquita:25
openjdk17-crac
[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.15_p13-r1"},{"fixed":"17.0.16_p13-r0"}]}]
Alpaquita:25
openjdk17-lite
[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.15_p10-r0"},{"fixed":"17.0.16_p12-r0"}]}]
Alpaquita:25
openjdk21
[{"type":"ECOSYSTEM","events":[{"introduced":"21.0.7_p9-r1"},{"fixed":"21.0.8_p12-r0"}]}]
Alpaquita:25
openjdk21-container-jre
[{"type":"ECOSYSTEM","events":[{"introduced":"21.0.7_p9-r0"},{"fixed":"21.0.8_p12-r0"}]}]
Alpaquita:25
openjdk21-crac
[{"type":"ECOSYSTEM","events":[{"introduced":"21.0.7_p12-r1"},{"fixed":"21.0.8_p13-r0"}]}]
Alpaquita:25
openjdk21-lite
[{"type":"ECOSYSTEM","events":[{"introduced":"21.0.7_p9-r0"},{"fixed":"21.0.8_p12-r0"}]}]
Alpaquita:25
openjdk24
[{"type":"ECOSYSTEM","events":[{"introduced":"24.0.1_p11-r0"},{"fixed":"24.0.2_p12-r0"}]}]
Alpaquita:25
openjdk24-container-jre
[{"type":"ECOSYSTEM","events":[{"introduced":"24.0.1_p11-r0"},{"fixed":"24.0.2_p12-r0"}]}]
Alpaquita:25
openjdk24-lite
[{"type":"ECOSYSTEM","events":[{"introduced":"24.0.1_p11-r0"},{"fixed":"24.0.2_p12-r0"}]}]
Alpaquita:25
openjdk8
[{"type":"ECOSYSTEM","events":[{"introduced":"8.452_p11-r0"},{"fixed":"8.462_p11-r0"}]}]
Alpaquita:stream
libxslt
[{"type":"ECOSYSTEM","events":[{"introduced":"1.1.37-r0"},{"fixed":"1.1.43-r0"}]}]
Alpaquita:stream
openjdk11
[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.19_p7-r0"},{"fixed":"11.0.28_p12-r0"}]}]
Alpaquita:stream
openjdk11-container-jre
[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.19_p7-r0"},{"fixed":"11.0.28_p12-r0"}]}]
Alpaquita:stream
openjdk11-lite
[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.19_p7-r1"},{"fixed":"11.0.28_p12-r0"}]}]
Alpaquita:stream
openjdk17
[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.7_p7-r1"},{"fixed":"17.0.16_p12-r0"}]}]
Alpaquita:stream
openjdk17-container-jre
[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.7_p7-r0"},{"fixed":"17.0.16_p12-r0"}]}]
Alpaquita:stream
openjdk17-crac
[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.10_p13-r0"},{"fixed":"17.0.16_p13-r0"}]}]
Alpaquita:stream
openjdk17-lite
[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.7_p7-r1"},{"fixed":"17.0.16_p12-r0"}]}]
Alpaquita:stream
openjdk21
[{"type":"ECOSYSTEM","events":[{"introduced":"21_p37-r0"},{"fixed":"21.0.8_p12-r0"}]}]
Alpaquita:stream
openjdk21-container-jre
[{"type":"ECOSYSTEM","events":[{"introduced":"21_p37-r0"},{"fixed":"21.0.8_p12-r0"}]}]
Alpaquita:stream
openjdk21-crac
[{"type":"ECOSYSTEM","events":[{"introduced":"21.0.2_p15-r0"},{"fixed":"21.0.8_p13-r0"}]}]
Alpaquita:stream
openjdk21-lite
[{"type":"ECOSYSTEM","events":[{"introduced":"21_p37-r0"},{"fixed":"21.0.8_p12-r0"}]}]
Alpaquita:stream
openjdk24
[{"type":"ECOSYSTEM","events":[{"introduced":"24_p37-r0"},{"fixed":"24.0.2_p12-r0"}]}]
Alpaquita:stream
openjdk24-container-jre
[{"type":"ECOSYSTEM","events":[{"introduced":"24_p37-r0"},{"fixed":"24.0.2_p12-r0"}]}]
Alpaquita:stream
openjdk24-lite
[{"type":"ECOSYSTEM","events":[{"introduced":"24_p37-r0"},{"fixed":"24.0.2_p12-r0"}]}]
Alpaquita:stream
openjdk8
[{"type":"ECOSYSTEM","events":[{"introduced":"8u372_p7-r1"},{"fixed":"8.462_p11-r0"}]}]
BellSoft Hardened Containers:23
libxslt
[{"type":"ECOSYSTEM","events":[{"introduced":"1.1.37-r0"},{"fixed":"1.1.37-r2"}]}]
BellSoft Hardened Containers:23
openjdk11-container-jre
[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.19_p7-r0"},{"fixed":"11.0.28_p12-r0"}]}]
BellSoft Hardened Containers:23
openjdk11-lite
[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.19_p7-r1"},{"fixed":"11.0.28_p12-r0"}]}]
BellSoft Hardened Containers:23
openjdk11-perf
[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.20.1_p1-r0"},{"fixed":"11.0.28_p13-r0"}]}]
BellSoft Hardened Containers:23
openjdk17-container-jre
[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.7_p7-r0"},{"fixed":"17.0.16_p12-r0"}]}]
BellSoft Hardened Containers:23
openjdk17-crac
[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.13_p13-r0"},{"fixed":"17.0.16_p13-r0"}]}]
BellSoft Hardened Containers:23
openjdk17-lite
[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.7_p7-r1"},{"fixed":"17.0.16_p12-r0"}]}]
BellSoft Hardened Containers:23
openjdk21-container-jre
[{"type":"ECOSYSTEM","events":[{"introduced":"21_p37-r0"},{"fixed":"21.0.8_p12-r0"}]}]
BellSoft Hardened Containers:23
openjdk21-crac
[{"type":"ECOSYSTEM","events":[{"introduced":"21.0.5_p12-r0"},{"fixed":"21.0.8_p13-r0"}]}]
BellSoft Hardened Containers:23
openjdk21-lite
[{"type":"ECOSYSTEM","events":[{"introduced":"21_p37-r0"},{"fixed":"21.0.8_p12-r0"}]}]
BellSoft Hardened Containers:23
openjdk24-container-jre
[{"type":"ECOSYSTEM","events":[{"introduced":"24_p37-r0"},{"fixed":"24.0.2_p12-r0"}]}]
BellSoft Hardened Containers:23
openjdk24-lite
[{"type":"ECOSYSTEM","events":[{"introduced":"24_p37-r0"},{"fixed":"24.0.2_p12-r0"}]}]
BellSoft Hardened Containers:23
openjdk8
[{"type":"ECOSYSTEM","events":[{"introduced":"8u372_p7-r0"},{"fixed":"8.462_p11-r0"}]}]
BellSoft Hardened Containers:23
openjdk8-perf
[{"type":"ECOSYSTEM","events":[{"introduced":"8u392_p9-r1"},{"fixed":"8.462_p12-r0"}]}]
BellSoft Hardened Containers:25
openjdk11-container-jre
[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.27_p9-r0"},{"fixed":"11.0.28_p12-r0"}]}]
BellSoft Hardened Containers:25
openjdk11-lite
[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.27_p9-r0"},{"fixed":"11.0.28_p12-r0"}]}]
BellSoft Hardened Containers:25
openjdk17-container-jre
[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.15_p10-r0"},{"fixed":"17.0.16_p12-r0"}]}]
BellSoft Hardened Containers:25
openjdk17-crac
[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.15_p13-r1"},{"fixed":"17.0.16_p13-r0"}]}]
BellSoft Hardened Containers:25
openjdk17-lite
[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.15_p10-r0"},{"fixed":"17.0.16_p12-r0"}]}]
BellSoft Hardened Containers:25
openjdk21-container-jre
[{"type":"ECOSYSTEM","events":[{"introduced":"21.0.7_p9-r0"},{"fixed":"21.0.8_p12-r0"}]}]
BellSoft Hardened Containers:25
openjdk21-crac
[{"type":"ECOSYSTEM","events":[{"introduced":"21.0.7_p12-r1"},{"fixed":"21.0.8_p13-r0"}]}]
BellSoft Hardened Containers:25
openjdk21-lite
[{"type":"ECOSYSTEM","events":[{"introduced":"21.0.7_p9-r0"},{"fixed":"21.0.8_p12-r0"}]}]
BellSoft Hardened Containers:25
openjdk24-container-jre
[{"type":"ECOSYSTEM","events":[{"introduced":"24.0.1_p11-r0"},{"fixed":"24.0.2_p12-r0"}]}]
BellSoft Hardened Containers:25
openjdk24-lite
[{"type":"ECOSYSTEM","events":[{"introduced":"24.0.1_p11-r0"},{"fixed":"24.0.2_p12-r0"}]}]
BellSoft Hardened Containers:25
openjdk8
[{"type":"ECOSYSTEM","events":[{"introduced":"8.452_p11-r0"},{"fixed":"8.462_p11-r0"}]}]
BellSoft Hardened Containers:stream
libxslt
[{"type":"ECOSYSTEM","events":[{"introduced":"1.1.37-r0"},{"fixed":"1.1.43-r0"}]}]
BellSoft Hardened Containers:stream
openjdk11-container-jre
[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.19_p7-r0"},{"fixed":"11.0.28_p12-r0"}]}]
BellSoft Hardened Containers:stream
openjdk11-lite
[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.19_p7-r1"},{"fixed":"11.0.28_p12-r0"}]}]
BellSoft Hardened Containers:stream
openjdk17-container-jre
[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.7_p7-r0"},{"fixed":"17.0.16_p12-r0"}]}]
BellSoft Hardened Containers:stream
openjdk17-crac
[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.10_p13-r0"},{"fixed":"17.0.16_p13-r0"}]}]
BellSoft Hardened Containers:stream
openjdk17-lite
[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.7_p7-r1"},{"fixed":"17.0.16_p12-r0"}]}]
BellSoft Hardened Containers:stream
openjdk21-container-jre
[{"type":"ECOSYSTEM","events":[{"introduced":"21_p37-r0"},{"fixed":"21.0.8_p12-r0"}]}]
BellSoft Hardened Containers:stream
openjdk21-crac
[{"type":"ECOSYSTEM","events":[{"introduced":"21.0.2_p15-r0"},{"fixed":"21.0.8_p13-r0"}]}]
BellSoft Hardened Containers:stream
openjdk21-lite
[{"type":"ECOSYSTEM","events":[{"introduced":"21_p37-r0"},{"fixed":"21.0.8_p12-r0"}]}]
BellSoft Hardened Containers:stream
openjdk24-container-jre
[{"type":"ECOSYSTEM","events":[{"introduced":"24_p37-r0"},{"fixed":"24.0.2_p12-r0"}]}]
BellSoft Hardened Containers:stream
openjdk24-lite
[{"type":"ECOSYSTEM","events":[{"introduced":"24_p37-r0"},{"fixed":"24.0.2_p12-r0"}]}]
BellSoft Hardened Containers:stream
openjdk8
[{"type":"ECOSYSTEM","events":[{"introduced":"8u372_p7-r1"},{"fixed":"8.462_p11-r0"}]}]
References
- advisory docs.bell-sw.com