Home

Description

EVerest is an EV charging software stack. Prior to version 2025.10.0, the use of the `assert` function to handle errors frequently causes the module to crash. This is particularly critical because the manager shuts down all other modules and exits when any one of them terminates, leading to a denial of service. In a context where a manager handles multiple EVSE, this would also impact other users. Version 2025.10.0 fixes the issue.

PUBLISHED Reserved 2025-12-15 | Published 2026-01-21 | Updated 2026-01-21 | Assigner GitHub_M




HIGH: 7.4CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Problem types

CWE-20: Improper Input Validation

Product status

< 2025.10.0
affected

References

github.com/...t-core/security/advisories/GHSA-cxc5-rrj5-8pf3

cve.org (CVE-2025-68134)

nvd.nist.gov (CVE-2025-68134)

Download JSON