CISA Thorium

• CVE-2025-35436 Medium 5.3 CISA Thorium account verification email error handling 0.6%
• CVE-2025-35435 Medium 4.3 CISA Thorium download stream divide by zero 0.4%
• CVE-2025-35434 Medium 4.2 CISA Thorium does not validate TLS connections to Elasticsearch 0.2%
• CVE-2025-35433 Medium 5.0 CISA Thorium does not properly invalidate previously used tokens 0.3%
• CVE-2025-35432 Medium 5.3 CISA Thorium does not rate limit account verification email messages 0.6%
• CVE-2025-35431 Medium 5.4 CISA Thorium LDAP injection 0.3%
• CVE-2025-35430 Medium 5.0 CISA Thorium insecure downloaded file path validation 0.5%