What is GHSA-pg62-xhhc-55cc?

GHSA-pg62-xhhc-55cc is a security advisory published by GitHub Security Advisories with Medium severity. Northern.tech Mender Client 5 before 5.0.4 allows a Cryptographic signature verification bypass.

Which CVE IDs does GHSA-pg62-xhhc-55cc cover?

GHSA-pg62-xhhc-55cc covers the following CVE IDs: CVE-2025-67903. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-pg62-xhhc-55cc?

GHSA-pg62-xhhc-55cc has a CVSS v3 base score of 5.3, published by GitHub Security Advisories.

GHSA-pg62-xhhc-55ccMediumCVSS 5.3

Northern.tech Mender Client 5 before 5.0.4 allows a Cryptographic signature verification bypass.

Vendor

GitHub Security Advisories

Published

May 27, 2026

Last Modified

May 29, 2026

🔗 CVE IDs covered (1)

CVE-2025-67903 →

📋 Description

Northern.tech Mender Client 5 before 5.0.4 allows a Cryptographic signature verification bypass.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2025-67903
https://mender.io/blog/cve-2025-67903-signature-verification-bypass-in-mender-client
https://northern.tech
https://github.com/advisories/GHSA-pg62-xhhc-55cc