Skip to content
OpenAdvisories
High · 7.5 CVE-2025-22874 BIT-golang-2025-22874EUVD-2025-18136GHSA-6f52-wpx2-hvf2GO-2025-3749

Usage of ExtKeyUsageAny disables policy validation in crypto/x509

Published Jun 11, 2025 · Updated Jun 16, 2025 · Assigned by Go

Vendor: Go standard library Product: crypto/x509 Package: addon-resizer Package: addon-resizer-compat Package: age Package: amass Package: amazon-cloudwatch-agent Package: amazon-cloudwatch-agent-all Package: amazon-cloudwatch-agent-amazon-cloudwatch-agent-config-wizard Package: amazon-cloudwatch-agent-compat Package: amazon-cloudwatch-agent-config-downloader Package: amazon-cloudwatch-agent-config-translator Package: amazon-cloudwatch-agent-start-amazon-cloudwatch-agent Package: amazon-k8s-cni Package: amazon-k8s-cni-compat Package: amazon-k8s-cni-init Package: amazon-k8s-cni-init-compat Package: apko Package: authservice Package: authservice-compat Package: aws-application-networking-k8s Package: aws-application-networking-k8s-compat Package: aws-efs-csi-driver Package: aws-eks-pod-identity-agent Package: aws-eks-pod-identity-agent-compat Package: aws-flb-cloudwatch Package: aws-flb-cloudwatch-compat Package: aws-flb-firehose Package: aws-flb-firehose-compat Package: aws-flb-kinesis Package: aws-flb-kinesis-compat Package: aws-load-balancer-controller Package: aws-load-balancer-controller-compat Package: aws-privateca-issuer Package: aws-privateca-issuer-compat Package: azcopy Package: azure-service-operator Package: azure-service-operator-compat Package: azure-workload-identity-webhook Package: azure-workload-identity-webhook-compat Package: bank-vaults Package: bank-vaults-template Package: bazelisk Package: bazelisk-default Package: blobfuse2 Package: blobfuse2-health-monitor Package: blobfuse2-syslog Package: bom Package: boring-registry Package: buf Package: buildctl Package: buildkitd Package: capslock Package: cargobump Package: cass-operator Package: cass-operator-compat Package: cass-operator-config Package: cert-manager-cmctl Package: cert-manager-istio-csr Package: cert-manager-istio-csr-compat Package: cert-manager-webhook-pdns Package: cfssl Package: cfssl-bundle Package: cfssl-certinfo Package: cfssl-json Package: cfssl-mkbundle Package: cfssl-multirootca Package: cfssl-newkey Package: cfssl-scan Package: chart-testing Package: chartmuseum Package: checksec Package: cilium-cli Package: clickhouse-operator Package: clickhouse-operator-compat Package: clickhouse-operator-metrics-exporter Package: clickhouse-operator-metrics-exporter-compat Package: cloud-provider-aws-1.31 Package: cloud-provider-aws-1.31-cloud-controller-manager Package: cloud-provider-aws-1.31-ecr-credential-provider Package: cloud-sql-proxy-2.16 Package: cloud-sql-proxy-2.16-compat Package: cloudnative-pg Package: cloudnative-pg-plugins Package: cloudprober Package: cloudprober-compat Package: cluster-proportional-autoscaler Package: cluster-proportional-autoscaler-compat Package: cni-plugins Package: cni-plugins-aws-k8s-compat Package: cni-plugins-bandwidth Package: cni-plugins-bandwidth-compat Package: cni-plugins-bridge Package: cni-plugins-bridge-compat Package: cni-plugins-dhcp Package: cni-plugins-dhcp-compat Package: cni-plugins-dummy Package: cni-plugins-dummy-compat Package: cni-plugins-firewall Package: cni-plugins-firewall-compat Package: cni-plugins-host-device Package: cni-plugins-host-device-compat Package: cni-plugins-host-local Package: cni-plugins-host-local-compat Package: cni-plugins-ipam Package: cni-plugins-ipvlan Package: cni-plugins-ipvlan-compat Package: cni-plugins-loopback Package: cni-plugins-loopback-compat Package: cni-plugins-macvlan Package: cni-plugins-macvlan-compat Package: cni-plugins-main Package: cni-plugins-meta Package: cni-plugins-portmap Package: cni-plugins-portmap-compat Package: cni-plugins-ptp Package: cni-plugins-ptp-compat Package: cni-plugins-sbr Package: cni-plugins-sbr-compat Package: cni-plugins-static Package: cni-plugins-static-compat Package: cni-plugins-tap Package: cni-plugins-tap-compat Package: cni-plugins-tuning Package: cni-plugins-tuning-compat Package: cni-plugins-vlan Package: cni-plugins-vlan-compat Package: cni-plugins-vrf Package: cni-plugins-vrf-compat Package: configmap-reload Package: confluent-common-docker Package: confluent-common-docker-base Package: containerd-1 Package: containerd-service-1 Package: containerd-shim-runc-v2-1 Package: containerd-stress-1 Package: controller-gen Package: cortex Package: cri-tools Package: crictl Package: critest Package: croc Package: crossplane-provider-sql Package: ctop Package: ctr-1 Package: dagdotdev Package: dask-gateway Package: dask-gateway-server Package: dataplaneapi Package: dbmate Package: delve Package: descheduler Package: dex Package: dex-iamguarded-compat Package: dgraph Package: direnv Package: dive Package: docker-cli Package: docker-cli-buildx Package: docker-cli-doc Package: docker-credential-acr-env Package: docker-credential-ecr-login Package: docker-credential-gcr Package: docker-dind Package: docker-machine-driver-harvester Package: docker-machine-driver-linode Package: dockerize Package: doppler-kubernetes-operator Package: dynamic-localpv-provisioner Package: elvish Package: envconsul Package: envoy-gateway Package: envoy-gateway-compat Package: envoy-gateway-egctl Package: esbuild Package: falco-exporter Package: falcosidekick Package: filebrowser Package: filebrowser-compat Package: fixuid Package: flannel Package: flannel-cni-plugin Package: flannel-cni-plugin-compat Package: flannel-compat Package: fluent-bit-plugin-loki Package: fluent-operator Package: fluent-watcher Package: fluent-watcher-compat Package: fluent-watcher-config Package: flux-helm-controller Package: flux-helm-controller-iamguarded-compat Package: flux-kustomize-controller Package: flux-kustomize-controller-iamguarded-compat Package: flux-notification-controller Package: flux-notification-controller-iamguarded-compat Package: flyte Package: fq Package: frp Package: fscrypt Package: fulcio Package: fuse-overlayfs-snapshotter Package: fzf Package: gatus Package: gatus-compat Package: gcsfuse Package: ghaudit Package: git-credential-oauth Package: git-lfs Package: git-lfs-config Package: git-sync Package: git-sync-compat Package: gke-gcloud-auth-plugin Package: glab Package: glow Package: go Package: go-1.20 Package: go-1.22 Package: go-1.23 Package: go-1.24 Package: go-bindata Package: go-licenses Package: go-md2man Package: go-md2man-doc Package: gobump Package: gobuster Package: gogatekeeper Package: gogatekeeper-compat Package: golang Package: golang-1.10 Package: golang-1.13 Package: golang-1.14 Package: golang-1.16 Package: golang-1.17 Package: golang-1.18 Package: golang-1.20 Package: golang-1.21 Package: golang-1.23 Package: golang-1.24 Package: golang-1.24 Package: golang-1.6 Package: golang-1.8 Package: golang-1.9 Package: golangci-lint Package: gostatsd Package: gosu Package: gotestsum Package: govulncheck Package: gpu-feature-discovery Package: grafana-mimir Package: grafana-operator Package: grafana-operator-bitnami-compat Package: grafana-rollout-operator Package: grpc-health-probe Package: grpc-health-probe-compat Package: grpcurl Package: harbor-cli Package: harbor-registry Package: harbor-scanner-trivy Package: hcloud Package: hello-world-golang Package: helm Package: helm-3 Package: helm-4 Package: helm-docs Package: helm-push Package: hey Package: hivemind Package: http-echo Package: hubble Package: hubble-compat Package: hubble-ui Package: hubble-ui-backend Package: incert Package: influx Package: ini-file Package: ip-masq-agent Package: istio-pilot-agent-1.25 Package: istio-pilot-agent-1.25-compat Package: jaeger-operator Package: jaeger-operator-compat Package: jitsucom-bulker Package: jitsucom-bulker-bulker Package: jitsucom-bulker-bulker-compat Package: jitsucom-bulker-ingest Package: jitsucom-bulker-ingest-compat Package: jitsucom-bulker-ingmgr Package: jitsucom-bulker-ingmgr-compat Package: jitsucom-bulker-sidecar Package: jitsucom-bulker-sidecar-compat Package: jitsucom-bulker-syncctl Package: jitsucom-bulker-syncctl-compat Package: k3d Package: k3d-proxy Package: k3d-tools Package: k8s-device-plugin Package: k8sgpt Package: k8sgpt-operator Package: k8sgpt-operator-compat Package: k8ssandra-client Package: k8ssandra-client-compat Package: k8ssandra-operator Package: k8ssandra-operator-compat Package: k9s Package: kaf Package: kafka_exporter Package: kafka-proxy Package: kafka-proxy-compat Package: kapp Package: kapp-controller Package: kapp-controller-compat Package: karma Package: kbld Package: kind Package: kine Package: knative-client Package: ko Package: kor Package: kpt Package: kserve-modelmesh-serving Package: kserve-modelmesh-serving-compat Package: kube-bench Package: kube-bench-configs Package: kube-fluentd-operator Package: kube-fluentd-operator-compat Package: kube-fluentd-operator-default-config Package: kube-fluentd-operator-oci-entrypoint Package: kube-rbac-proxy Package: kube-state-metrics Package: kube-state-metrics-iamguarded-compat Package: kube-vip Package: kube-vip-cloud-provider Package: kube-vip-cloud-provider-compat Package: kube-vip-compat Package: kubebuilder Package: kubecolor Package: kuberay-operator Package: kuberay-operator-compat Package: kuberlr Package: kubernetes-csi-driver-hostpath Package: kubernetes-csi-driver-nfs Package: kubernetes-csi-driver-nfs-compat Package: kubernetes-csi-external-attacher Package: kubernetes-csi-external-attacher-compat Package: kubernetes-csi-external-provisioner Package: kubernetes-csi-livenessprobe Package: kubernetes-dashboard Package: kubernetes-dashboard-api Package: kubernetes-dashboard-api-compat Package: kubernetes-dashboard-auth Package: kubernetes-dashboard-auth-compat Package: kubernetes-dashboard-metrics-scraper Package: kubernetes-dashboard-metrics-scraper-compat Package: kubernetes-dashboard-web Package: kubernetes-dashboard-web-compat Package: kubernetes-dns-node-cache Package: kubernetes-event-exporter Package: kubernetes-event-exporter-iamguarded-compat Package: kubernetes-release Package: kubernetes-release-go-runner Package: kubernetes-replicator Package: kubevela Package: kubevela-vela-cli Package: kubevela-vela-core Package: kubevela-vela-core-compat Package: kubewatch Package: kustomize Package: kwok Package: kwokctl Package: kyverno-policy-reporter Package: kyverno-policy-reporter-compat Package: kyverno-policy-reporter-kyverno-plugin Package: kyverno-policy-reporter-kyverno-plugin-compat Package: kyverno-policy-reporter-ui Package: kyverno-policy-reporter-ui-compat Package: lazydocker Package: libnvidia-container Package: licenseclassifier Package: linkerd2 Package: linkerd2-cli Package: linkerd2-controller Package: linkerd2-controller-compat Package: linkerd2-debug Package: linkerd2-metrics-api Package: linkerd2-metrics-api-compat Package: linkerd2-proxy-identity Package: linkerd2-proxy-init Package: linkerd2-proxy-init-compat Package: linkerd2-tap Package: linkerd2-tap-compat Package: linkerd2-web Package: litefs Package: litestream Package: local-path-provisioner Package: local-static-provisioner Package: local-static-provisioner-compat Package: local-volume-node-cleanup Package: local-volume-node-cleanup-compat Package: logstash-exporter Package: mage Package: maru Package: mc Package: mc-iamguarded-2025-compat Package: metallb Package: metallb-controller Package: metallb-controller-compat Package: metallb-cp-tool Package: metallb-cp-tool-compat Package: metallb-frr Package: metallb-frr-compat Package: metallb-speaker Package: metallb-speaker-compat Package: metrics-server Package: metrics-server-compat Package: metrics-server-iamguarded-compat Package: minify Package: minify-bash-completion Package: minio Package: minio-iamguarded-2025-compat Package: minio-operator Package: minio-operator-compat Package: minio-operator-sidecar Package: minio-operator-sidecar-compat Package: mkcert Package: mods Package: mongo-tools Package: mongodb-kubernetes-operator Package: mongodb-kubernetes-operator-compat Package: mongodb-kubernetes-operator-readinessprobe Package: mongodb-kubernetes-operator-readinessprobe-compat Package: mongodb-kubernetes-operator-version-upgrade-post-start-hook Package: mongodb-kubernetes-operator-version-upgrade-post-start-hook-compat Package: mps-control-daemon Package: msft-golang Package: multus-cni Package: multus-cni-compat Package: nats Package: nats-server Package: nats-server-compat Package: nats-top Package: nats-top-compat Package: nerdctl Package: neuvector-db-updater Package: neuvector-dbgen Package: newrelic-fluent-bit-output-compat Package: newrelic-infra-operator Package: newrelic-infrastructure-agent Package: newrelic-k8s-metadata-injection Package: newrelic-k8s-metadata-injection-compat Package: newrelic-nri-kube-events Package: newrelic-nri-statsd Package: newrelic-prometheus-configurator Package: nfs-subdir-external-provisioner Package: nginx-prometheus-exporter Package: nginx-prometheus-exporter-iamguarded-compat Package: nodetaint Package: nri-cassandra Package: nri-cassandra-compat Package: nri-cassandra-jdk11 Package: nri-consul Package: nri-consul-compat Package: nri-couchbase Package: nri-couchbase-compat Package: nri-discovery-kubernetes Package: nri-discovery-kubernetes-compat Package: nri-elasticsearch Package: nri-elasticsearch-compat Package: nri-f5 Package: nri-f5-compat Package: nri-haproxy Package: nri-haproxy-compat Package: nri-jmx Package: nri-jmx-compat Package: nri-jmx-jdk11 Package: nri-kafka Package: nri-kafka-compat Package: nri-kafka-jdk11 Package: nri-mongodb Package: nri-mongodb-compat Package: nri-mysql Package: nri-mysql-compat Package: nri-nagios Package: nri-nagios-compat Package: nri-nginx Package: nri-nginx-compat Package: nri-postgresql Package: nri-postgresql-compat Package: nri-prometheus Package: nri-rabbitmq Package: nri-rabbitmq-compat Package: nri-redis Package: nri-redis-compat Package: nsc Package: nvidia-container-toolkit Package: nvidia-container-toolkit-nvidia-cdi-hook Package: nvidia-container-toolkit-nvidia-container-runtime Package: nvidia-container-toolkit-nvidia-container-runtime-cdi Package: nvidia-container-toolkit-nvidia-container-runtime-hook Package: nvidia-container-toolkit-nvidia-container-runtime-legacy Package: nvidia-container-toolkit-nvidia-ctk Package: nvidia-container-toolkit-nvidia-ctk-installer Package: nvidia-container-toolkit-nvidia-toolkit Package: nvidia-device-plugin Package: oauth2-proxy Package: oauth2-proxy-iamguarded-compat Package: ollama Package: ollama-cpu Package: op-geth Package: op-geth-abigen Package: op-geth-clef Package: op-geth-compat Package: op-geth-devp2p Package: op-geth-evm Package: op-geth-rlpdump Package: opa Package: openbao-k8s Package: openbao-k8s-compat Package: opencost Package: opencost-compat Package: opensearch-k8s-operator Package: opensearch-k8s-operator-compat Package: opentelemetry-operator Package: opentelemetry-operator-compat Package: opentelemetry-operator-otel-allocator Package: opentelemetry-operator-otel-allocator-compat Package: oras Package: osv-scanner Package: otel-cli Package: paranoia Package: pdfcpu Package: percona-server-mongodb-operator Package: percona-server-mongodb-operator-compat Package: percona-server-mongodb-operator-mongodb-healthcheck Package: petname Package: pg_timetable Package: pg_timetable-compat Package: pgpool2_exporter Package: php-fpm_exporter Package: pluto Package: pluto-compat Package: podcli Package: podinfo Package: podinfo-compat Package: pombump Package: portieris Package: portieris-compat Package: postgres-operator Package: postgres-operator-compat Package: prometheus-adapter Package: prometheus-admission-webhook Package: prometheus-config-reloader Package: prometheus-operator Package: prometheus-operator-iamguarded-compat Package: prometheus-pushgateway Package: prometheus-pushgateway-iamguarded-compat Package: promxy Package: protoc-gen-go Package: protoc-gen-go-grpc Package: pvc-autoresizer Package: pvc-autoresizer-compat Package: rabbitmq-default-user-credential-updater Package: rabbitmq-default-user-credential-updater-compat Package: rancher-fleet Package: rancher-fleet-agent Package: rancher-fleet-cli Package: rancher-fleet-controller Package: rancher-fleet-termination-log Package: rancher-helm-3 Package: rancher-loglevel Package: rancher-system-agent Package: rancher-telemetry Package: redis-operator Package: redis-operator-compat Package: redka Package: regclient Package: regclient-regbot Package: regclient-regbot-compat Package: regclient-regctl Package: regclient-regctl-compat Package: regclient-regsync Package: regclient-regsync-compat Package: rekor Package: rekor-backfill-index Package: rekor-cli Package: rekor-server Package: render-template Package: restic Package: restic-compat Package: rootlesskit Package: rootlesskit-config-nonroot Package: runc Package: runc-doc Package: s5cmd Package: sbom-convert Package: sbom-scorecard Package: scorecard Package: secrets-store-csi-driver Package: secrets-store-csi-driver-crds Package: secrets-store-csi-driver-provider-aws Package: secrets-store-csi-driver-provider-azure Package: secrets-store-csi-driver-provider-gcp Package: sftpgo Package: sftpgo-plugin-auth Package: sftpgo-plugin-eventsearch Package: sftpgo-plugin-eventstore Package: sftpgo-plugin-geoipfilter Package: sftpgo-plugin-kms Package: sftpgo-plugin-pubsub Package: shfmt Package: sigstore-scaffolding Package: sigstore-scaffolding-cloudsqlproxy Package: sigstore-scaffolding-ctlog-createctconfig Package: sigstore-scaffolding-ctlog-managectroots Package: sigstore-scaffolding-ctlog-verifyfulcio Package: sigstore-scaffolding-fulcio-createcerts Package: sigstore-scaffolding-getoidctoken Package: sigstore-scaffolding-rekor-createsecret Package: sigstore-scaffolding-trillian-createdb Package: sigstore-scaffolding-trillian-createtree Package: sigstore-scaffolding-trillian-updatetree Package: sigstore-scaffolding-tsa-createcertchain Package: sigstore-scaffolding-tuf-createsecret Package: sigstore-scaffolding-tuf-server Package: skaffold Package: skopeo Package: slsa-verifier Package: smarter-device-manager Package: sonobuoy Package: sonobuoy-compat Package: spark-operator Package: spark-operator-oci-entrypoint Package: speedtest-go Package: spiffe-helper Package: spiffe-helper-compat Package: spire-agent Package: spire-controller-manager Package: spire-controller-manager-compat Package: spire-oidc-discovery-provider Package: spire-server Package: splunk-otel-collector Package: splunk-otel-collector-compat Package: splunk-otel-collector-doc Package: spqr Package: src Package: sriov-network-device-plugin Package: sriov-network-device-plugin-entrypoint Package: stakater-reloader Package: stakater-reloader-compat Package: stdlib Package: steampipe Package: step Package: step-ca Package: step-issuer Package: step-issuer-compat Package: step-kms-plugin Package: stern Package: supercronic Package: tdbg Package: tdbg-compat Package: temporal Package: temporal-cassandra-tool Package: temporal-cassandra-tool-compat Package: temporal-compat Package: temporal-server Package: temporal-server-compat Package: temporal-server-oci-entrypoint Package: temporal-server-schema Package: temporal-sql-tool Package: temporal-sql-tool-compat Package: temporal-ui-server Package: temporal-ui-server-oci-entrypoint Package: terraform Package: terraform-compat Package: terraform-docs Package: terraform-local-provider-config Package: terraform-mcp-server Package: terraform-provider-acme Package: terraform-provider-azapi Package: terraform-provider-azuread Package: terraform-provider-random Package: terraform-provider-sendgrid Package: terraform-provider-time Package: terraform-provider-tls Package: tflint Package: tflint-compat Package: thanos-operator Package: thanos-operator-compat Package: traefik-3.3 Package: traefik-3.4 Package: trillian Package: trillian-logserver Package: trillian-logsigner Package: trivy Package: trust-manager Package: vault-benchmark Package: vault-benchmark-compat Package: vault-env Package: vault-env-compat Package: vault-k8s Package: vault-secrets-webhook Package: vault-secrets-webhook-compat Package: velero Package: velero-compat Package: velero-plugin-for-aws Package: velero-plugin-for-aws-compat Package: velero-plugin-for-csi Package: velero-plugin-for-csi-compat Package: velero-plugin-for-microsoft-azure Package: velero-plugin-for-microsoft-azure-compat Package: velero-restore-helper Package: vendir Package: verticadb-operator Package: verticadb-operator-compat Package: vertical-pod-autoscaler Package: vertical-pod-autoscaler-recommender Package: vertical-pod-autoscaler-updater Package: volume-modifier-for-k8s Package: wait-for-port Package: wave Package: wazero Package: wgcf Package: whereabouts Package: whereabouts-compat Package: wire-go Package: wireguard-go Package: witness Package: wuzz Package: x509-certificate-exporter Package: x509-certificate-exporter-compat Package: xcaddy Package: yace Package: yq Package: ytt Package: yunikorn-k8shim Package: yunikorn-k8shim-compat Package: yunikorn-web Package: yunikorn-web-compat Ecosystem: Alpine Ecosystem: Azure Linux Ecosystem: Debian Ecosystem: Go Ecosystem: Ubuntu Ecosystem: Wolfi

Description

Calling Verify with a VerifyOptions.KeyUsages that contains ExtKeyUsageAny unintentionally disabledpolicy validation. This only affected certificate chains which contain policy graphs, which are rather uncommon.

Affected products

VendorProductAffectedFixed
Go standard library crypto/x509 1.24.0-0 – < 1.24.4 1.24.4

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 13 golang-1.24 1.24.4-1 —

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 26.04 LTS golang-1.23 +1 No fix yet —
Ubuntu 25.10 golang-1.23 +1 No fix yet —
Ubuntu 24.04 LTS golang-1.21 +2 No fix yet —
Ubuntu 22.04 LTS golang-1.17 +5 No fix yet —
Ubuntu 20.04 LTS golang-1.13 +4 No fix yet —
Show 7 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu 18.04 LTS golang-1.8 +2 No fix yet —
Ubuntu 16.04 LTS golang-1.6 +1 No fix yet —
Ubuntu 14.04 LTS golang-1.10 No fix yet —
Ubuntu Pro 22.04 LTS golang-1.13 No fix yet —
Ubuntu Pro 20.04 LTS golang-1.16 No fix yet —
Ubuntu Pro 18.04 LTS golang-1.13 +2 No fix yet —
Ubuntu Pro 16.04 LTS golang-1.13 +1 No fix yet —

Red Hat

Security tracker ↗
ReleasePackageFixed inAdvisory
RHEL 10 golang +7 1.24.4-1.el10_0 RHSA-2025:10677
RHEL 9 golang +7 1.24.4-1.el9_6 RHSA-2025:10676
Show 2 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
RHEL 9.4 E4S golang +6 1.25.9-1.el9_4 RHSA-2026:47712
RHEL 9.2 E4S golang +7 1.25.9-1.el9_2 RHSA-2026:47719

AlmaLinux

Errata ↗
ReleasePackageFixed inAdvisory
AlmaLinux 10 golang-src +3 1.24.4-1.el10_0.alma.1 ALSA-2025:10677

SUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
SLES 15 SP7 go1.24 1.24.4-150000.1.26.1 SUSE-SU-2025:01846-1
SLES 15 SP7 go1.24-openssl 1.24.6-150600.13.9.1 SUSE-SU-2025:03158-1
SLES 15 SP6 go1.24 1.24.4-150000.1.26.1 SUSE-SU-2025:01846-1
SLES 15 SP6 go1.24-openssl 1.24.6-150600.13.9.1 SUSE-SU-2025:03158-1
SLES 15 SP5 go1.24 1.24.4-150000.1.26.1 SUSE-SU-2025:01846-1
SLES 15 SP5 go1.24-openssl 1.24.4-150000.1.9.1 SUSE-SU-2025:02120-1
SLES 15 SP4 go1.24 1.24.4-150000.1.26.1 SUSE-SU-2025:01846-1
SLES 15 SP4 go1.24-openssl 1.24.4-150000.1.9.1 SUSE-SU-2025:02120-1
SLES 15 SP3 go1.24 1.24.4-150000.1.26.1 SUSE-SU-2025:01846-1
SLES 15 SP3 go1.24-openssl 1.24.4-150000.1.9.1 SUSE-SU-2025:02120-1
Show 7 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES for SAP 15 SP5 go1.24 1.24.4-150000.1.26.1 SUSE-SU-2025:01846-1
SLES for SAP 15 SP5 go1.24-openssl 1.24.4-150000.1.9.1 SUSE-SU-2025:02120-1
SLES for SAP 15 SP4 go1.24 1.24.4-150000.1.26.1 SUSE-SU-2025:01846-1
SLES for SAP 15 SP4 go1.24-openssl 1.24.4-150000.1.9.1 SUSE-SU-2025:02120-1
SLES for SAP 15 SP3 go1.24 1.24.4-150000.1.26.1 SUSE-SU-2025:01846-1
SLES for SAP 15 SP3 go1.24-openssl 1.24.4-150000.1.9.1 SUSE-SU-2025:02120-1
SLE HPC 15 SP5 go1.24 1.24.4-150000.1.26.1 SUSE-SU-2025:01846-1
SLE HPC 15 SP5 go1.24-openssl 1.24.4-150000.1.9.1 SUSE-SU-2025:02120-1
SLE HPC 15 SP4 go1.24 1.24.4-150000.1.26.1 SUSE-SU-2025:01846-1
SLE HPC 15 SP4 go1.24-openssl 1.24.4-150000.1.9.1 SUSE-SU-2025:02120-1
SLE HPC 15 SP3 go1.24 1.24.4-150000.1.26.1 SUSE-SU-2025:01846-1
SLE HPC 15 SP3 go1.24-openssl 1.24.4-150000.1.9.1 SUSE-SU-2025:02120-1
SUSE Enterprise Storage 7.1 go1.24 1.24.4-150000.1.26.1 SUSE-SU-2025:01846-1
SUSE Enterprise Storage 7.1 go1.24-openssl 1.24.4-150000.1.9.1 SUSE-SU-2025:02120-1

openSUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed go1.24 1.24.4-1.1 openSUSE-SU-2025:15224-1
openSUSE Tumbleweed govulncheck-vulndb 0.0.20250612T141001-1.1 openSUSE-SU-2025:15225-1
openSUSE Tumbleweed minio-client 20250721T052808Z-1.1 openSUSE-SU-2025:15379-1
openSUSE Tumbleweed nova 3.11.4-1.1 openSUSE-SU-2025:15251-1
openSUSE Tumbleweed polaris 9.6.4-1.1 openSUSE-SU-2025:15263-1
openSUSE Leap 15.6 go1.24 1.24.4-150000.1.26.1 SUSE-SU-2025:01846-1
openSUSE Leap 15.6 go1.24-openssl 1.24.6-150600.13.9.1 SUSE-SU-2025:03158-1

Alpine

Security tracker ↗
ReleasePackageFixed inAdvisory
Alpine v3.24 go 1.24.4-r0 —
Alpine v3.23 go 1.24.4-r0 —
Alpine v3.22 go 1.24.4-r0 —

Amazon Linux

ReleasePackageFixed inAdvisory
Amazon Linux 2023 amazon-cloudwatch-agent 1.300055.3-1.amzn2023 ALAS2023-2025-1029
Amazon Linux 2023 amazon-ecr-credential-helper 0.10.1-2.amzn2023 ALAS2023-2025-1214
Amazon Linux 2023 amazon-ssm-agent 3.3.3572.0-1.amzn2023 ALAS2023-2025-1359
Amazon Linux 2023 cni-plugins 1.7.1-1.amzn2023.0.2 ALAS2023-2025-1143
Amazon Linux 2023 containerd +1 2.0.5-1.amzn2023.0.2 ALAS2023-2025-1077
Amazon Linux 2023 docker 25.0.8-1.amzn2023.0.5 ALAS2023-2025-1074
Amazon Linux 2023 ecs-init 1.96.0-1.amzn2023 ALAS2023-2025-1109
Amazon Linux 2023 golang +6 1.24.4-1.amzn2023.0.1 ALAS2023-2025-1028
Amazon Linux 2023 libcap +3 2.73-1.amzn2023.0.3 ALAS2023-2025-1141
Amazon Linux 2023 nerdctl 2.1.2-1.amzn2023.0.1 ALAS2023-2025-1075
Amazon Linux 2023 oci-add-hooks 0-0.1.20200504git268e3bb.amzn2023.0.5 ALAS2023-2025-1079
Amazon Linux 2023 runc 1.2.6-1.amzn2023.0.1 ALAS2023-2025-1078
Amazon Linux 2023 runfinch-finch 1.8.3-1.amzn2023.0.1 ALAS2023-2025-1073
Amazon Linux 2023 soci-snapshotter 0.9.0-1.amzn2023.0.4 ALAS2023-2025-1076
Amazon Linux 2 amazon-cloudwatch-agent 1.300055.3-1.amzn2 ALAS2-2025-2904
Amazon Linux 2 amazon-ssm-agent 3.3.3572.0-1.amzn2 ALAS2-2025-3121

Azure Linux

ReleasePackageFixed inAdvisory
Azure Linux 3 golang 1.24.4-1 —
Azure Linux 2 (CBL-Mariner) msft-golang 1.24.1-3 —

Wolfi

ReleasePackageFixed inAdvisory
Wolfi rolling addon-resizer +1 1.8.23-r6 —
Wolfi rolling age 1.2.1-r5 —
Wolfi rolling amass 4.2.0-r24 —
Wolfi rolling amazon-cloudwatch-agent +6 1.300056.1-r1 —
Wolfi rolling amazon-k8s-cni +3 1.19.5-r1 —
Wolfi rolling apko 0.27.9-r1 —
Wolfi rolling authservice +1 1.0.4-r8 —
Wolfi rolling aws-application-networking-k8s +1 1.1.2-r0 —
Wolfi rolling aws-efs-csi-driver 2.1.8-r3 —
Wolfi rolling aws-eks-pod-identity-agent +1 0.1.30-r1 —
Wolfi rolling aws-flb-cloudwatch +1 1.9.4-r17 —
Wolfi rolling aws-flb-firehose +1 1.7.2-r17 —
Wolfi rolling aws-flb-kinesis +1 1.10.2-r18 —
Wolfi rolling aws-load-balancer-controller +1 2.13.2-r2 —
Wolfi rolling aws-privateca-issuer +4 1.6.0-r1 —
Wolfi rolling azcopy 10.29.1-r1 —
Wolfi rolling azure-service-operator +1 2.13.0-r3 —
Wolfi rolling azure-workload-identity-webhook +1 1.5.1-r0 —
Wolfi rolling bank-vaults +1 1.20.4-r31 —
Wolfi rolling bazelisk +4 1.26.0-r1 —
Wolfi rolling blobfuse2 +2 2.4.2-r2 —
Wolfi rolling bom 0.6.0-r21 —
Wolfi rolling boring-registry 0.16.4-r1 —
Wolfi rolling buf 1.54.0-r1 —
Wolfi rolling buildctl +1 0.22.0-r1 —
Wolfi rolling capslock 0.2.7-r4 —
Wolfi rolling cargobump 0.1.0-r4 —
Wolfi rolling cass-operator +2 1.24.0-r2 —
Wolfi rolling cert-manager-istio-csr +1 0.14.1-r1 —
Wolfi rolling cert-manager-webhook-pdns 2.5.2-r7 —
Wolfi rolling cfssl +7 1.6.5-r20 —
Wolfi rolling chart-testing 3.13.0-r1 —
Wolfi rolling chartmuseum 0.16.3-r2 —
Wolfi rolling checksec 3.0.2-r2 —
Wolfi rolling cilium-cli 0.18.4-r1 —
Wolfi rolling clickhouse-operator +3 0.25.0-r1 —
Wolfi rolling cloud-provider-aws-1.31 +2 1.31.6-r2 —
Wolfi rolling cloudprober +1 0.14.0-r2 —
Wolfi rolling cluster-proportional-autoscaler +1 1.10.2-r4 —
Wolfi rolling cni-plugins +42 1.7.1-r1 —
Wolfi rolling confluent-common-docker +1 7.6.0-r14 —
Wolfi rolling cortex 1.19.0-r7 —
Wolfi rolling crictl +2 1.33.0-r1 —
Wolfi rolling croc 10.2.2-r3 —
Wolfi rolling crossplane-provider-sql 0.12.0-r1 —
Wolfi rolling ctop 0.7.7-r25 —
Wolfi rolling ctr-1 +4 1.7.27-r3 —
Wolfi rolling dagdotdev 0.0.16-r1 —
Wolfi rolling dask-gateway +1 2025.4.0-r1 —
Wolfi rolling dataplaneapi 3.2.1-r0 —
Wolfi rolling dbmate 2.27.0-r1 —
Wolfi rolling delve 1.24.2-r1 —
Wolfi rolling descheduler 0.33.0-r1 —
Wolfi rolling dex +1 2.43.1-r2 —
Wolfi rolling dgraph 24.1.3-r1 —
Wolfi rolling direnv 2.36.0-r1 —
Wolfi rolling dive 0.13.1-r3 —
Wolfi rolling docker-cli +2 28.2.2-r1 —
Wolfi rolling docker-cli-buildx 0.25.0-r0 —
Wolfi rolling docker-credential-acr-env 0.7.0-r21 —
Wolfi rolling docker-credential-ecr-login 0.10.0-r1 —
Wolfi rolling docker-credential-gcr 2.1.29-r1 —
Wolfi rolling docker-machine-driver-harvester 1.0.2-r2 —
Wolfi rolling docker-machine-driver-linode 0.1.15-r3 —
Wolfi rolling dockerize 0.9.3-r3 —
Wolfi rolling dynamic-localpv-provisioner 4.3.0-r1 —
Wolfi rolling elvish 0.21.0-r4 —
Wolfi rolling envconsul 0.13.3-r1 —
Wolfi rolling envoy-gateway +5 1.4.1-r1 —
Wolfi rolling esbuild 0.25.5-r1 —
Wolfi rolling falco-exporter 0.8.7-r7 —
Wolfi rolling falcosidekick 2.31.1-r10 —
Wolfi rolling filebrowser +1 2.32.0-r9 —
Wolfi rolling fixuid 0.6.0-r1 —
Wolfi rolling flannel +2 0.27.0-r1 —
Wolfi rolling fluent-bit-plugin-loki 3.5.1-r1 —
Wolfi rolling flux-kustomize-controller +1 1.6.0-r2 —
Wolfi rolling flyte 1.15.3-r1 —
Wolfi rolling fq +1 0.15.0-r1 —
Wolfi rolling frp 0.62.1-r2 —
Wolfi rolling fscrypt 0.3.5-r8 —
Wolfi rolling fulcio 1.7.1-r2 —
Wolfi rolling fzf 0.62.0-r1 —
Wolfi rolling gatus +1 5.18.1-r2 —
Wolfi rolling gcsfuse 2.12.2-r1 —
Wolfi rolling ghaudit 0.4.0-r12 —
Wolfi rolling git-credential-oauth 0.15.1-r1 —
Wolfi rolling git-lfs +1 3.6.1-r8 —
Wolfi rolling git-sync +1 4.4.1-r1 —
Wolfi rolling gke-gcloud-auth-plugin 0.1.0-r7 —
Wolfi rolling glab 1.59.2-r1 —
Wolfi rolling glow 2.1.1-r1 —
Wolfi rolling go-1.20 1.20.14-r9 —
Wolfi rolling go-1.22 1.22.12-r8 —
Wolfi rolling go-1.23 1.23.10-r0 —
Wolfi rolling go-1.24 1.24.4-r0 —
Wolfi rolling go-bindata 3.1.3-r27 —
Wolfi rolling go-licenses 1.6.0-r27 —
Wolfi rolling go-md2man +1 2.0.7-r1 —
Wolfi rolling gobump +2 0.9.0-r4 —
Wolfi rolling gobuster 3.6.0-r23 —
Wolfi rolling gogatekeeper +6 3.4.0-r1 —
Wolfi rolling golangci-lint +1 2.1.6-r1 —
Wolfi rolling gostatsd 28.3.0-r16 —
Wolfi rolling gosu 1.17-r13 —
Wolfi rolling gotestsum +3 1.12.2-r1 —
Wolfi rolling govulncheck 1.1.4-r1 —
Wolfi rolling grafana-mimir +2 2.16.0-r3 —
Wolfi rolling grafana-operator +1 5.18.0-r2 —
Wolfi rolling grpc-health-probe +1 0.4.38-r1 —
Wolfi rolling grpcurl 1.9.3-r5 —
Wolfi rolling harbor-cli 0.0.6-r1 —
Wolfi rolling harbor-registry 3.0.0-r3 —
Wolfi rolling harbor-scanner-trivy 0.33.1-r1 —
Wolfi rolling hcloud 1.51.0-r1 —
Wolfi rolling hello-world-golang 1.3-r11 —
Wolfi rolling helm 3.18.2-r1 —
Wolfi rolling helm-3 3.19.2-r1 —
Wolfi rolling helm-4 4.0.1-r1 —
Wolfi rolling helm-docs 1.14.2-r9 —
Wolfi rolling helm-push 0.10.4-r29 —
Wolfi rolling hey 0.1.4-r24 —
Wolfi rolling hivemind 1.1.0-r8 —
Wolfi rolling http-echo 1.0.0-r15 —
Wolfi rolling hubble +1 1.17.3-r1 —
Wolfi rolling hubble-ui +1 0.13.2-r7 —
Wolfi rolling incert 0.5.0-r3 —
Wolfi rolling influx 2.7.5-r8 —
Wolfi rolling ini-file 1.4.8-r1 —
Wolfi rolling ip-masq-agent 2.12.0-r9 —
Wolfi rolling istio-pilot-agent-1.25 +1 1.25.3-r2 —
Wolfi rolling jaeger-operator +1 1.65.0-r6 —
Wolfi rolling jitsucom-bulker +10 2.10.0-r1 —
Wolfi rolling k3d +2 5.8.3-r13 —
Wolfi rolling k8s-device-plugin +3 0.17.2-r1 —
Wolfi rolling k8sgpt 0.4.17-r2 —
Wolfi rolling k8sgpt-operator +1 0.2.20-r1 —
Wolfi rolling k8ssandra-client +1 0.8.0-r1 —
Wolfi rolling k8ssandra-operator +1 1.23.1-r1 —
Wolfi rolling k9s 0.50.6-r1 —
Wolfi rolling kaf 0.2.13-r2 —
Wolfi rolling kafka-proxy +1 0.4.3-r1 —
Wolfi rolling kafka_exporter 1.9.0-r36 —
Wolfi rolling kapp 0.64.2-r1 —
Wolfi rolling karma 0.121-r2 —
Wolfi rolling kbld 0.46.0-r1 —
Wolfi rolling kind 0.29.0-r1 —
Wolfi rolling kine 0.13.15-r1 —
Wolfi rolling knative-client 1.18.0-r1 —
Wolfi rolling ko +1 0.18.0-r1 —
Wolfi rolling kor 0.6.1-r3 —
Wolfi rolling kpt 1.0.0_beta55-r8 —
Wolfi rolling kube-bench +1 0.10.7-r1 —
Wolfi rolling kube-fluentd-operator +3 1.18.2-r40 —
Wolfi rolling kube-rbac-proxy 0.19.1-r1 —
Wolfi rolling kube-state-metrics +1 2.15.0-r43 —
Wolfi rolling kube-vip +1 0.9.1-r1 —
Wolfi rolling kube-vip-cloud-provider +1 0.0.12-r2 —
Wolfi rolling kubebuilder 4.6.0-r1 —
Wolfi rolling kubecolor 0.5.1-r1 —
Wolfi rolling kuberay-operator +1 1.3.2-r4 —
Wolfi rolling kuberlr 0.6.0-r5 —
Wolfi rolling kubernetes-csi-driver-hostpath 1.16.1-r5 —
Wolfi rolling kubernetes-csi-driver-nfs +1 4.11.0-r3 —
Wolfi rolling kubernetes-csi-external-attacher +1 4.9.0-r1 —
Wolfi rolling kubernetes-csi-external-provisioner 5.3.0-r1 —
Wolfi rolling kubernetes-csi-livenessprobe 2.16.0-r1 —
Wolfi rolling kubernetes-dashboard 7.13.0-r2 —
Wolfi rolling kubernetes-dashboard-api +1 1.13.0-r2 —
Wolfi rolling kubernetes-dashboard-auth +1 1.3.0-r2 —
Wolfi rolling kubernetes-dashboard-metrics-scraper +1 1.2.2-r9 —
Wolfi rolling kubernetes-dashboard-web +1 1.7.0-r2 —
Wolfi rolling kubernetes-event-exporter +1 1.7-r43 —
Wolfi rolling kubernetes-release +1 0.18.0-r2 —
Wolfi rolling kubernetes-replicator 2.11.1-r4 —
Wolfi rolling kubevela +3 1.10.3-r6 —
Wolfi rolling kubewatch 2.11.0-r1 —
Wolfi rolling kustomize 5.6.0-r5 —
Wolfi rolling kwok +1 0.7.0-r1 —
Wolfi rolling kyverno-policy-reporter +1 3.1.4-r2 —
Wolfi rolling kyverno-policy-reporter-kyverno-plugin +1 1.6.4-r10 —
Wolfi rolling kyverno-policy-reporter-ui +1 2.3.10-r1 —
Wolfi rolling lazydocker 0.24.1-r4 —
Wolfi rolling libnvidia-container +9 1.17.8-r1 —
Wolfi rolling licenseclassifier 2.0.0-r2 —
Wolfi rolling linkerd2 +10 25.6.2-r0 —
Wolfi rolling linkerd2-proxy-init +1 2.4.2-r4 —
Wolfi rolling litefs 0.5.14-r1 —
Wolfi rolling litestream 0.3.13-r16 —
Wolfi rolling local-path-provisioner 0.0.31-r6 —
Wolfi rolling local-static-provisioner +3 2.8.0-r1 —
Wolfi rolling mage 1.15.0-r14 —
Wolfi rolling maru 0.6.0-r2 —
Wolfi rolling mc +1 0.20250521.015954-r1 —
Wolfi rolling metallb +8 0.15.2-r1 —
Wolfi rolling metrics-server +2 0.7.2-r13 —
Wolfi rolling minify +1 2.23.8-r1 —
Wolfi rolling minio +1 0.20250524.170830-r2 —
Wolfi rolling minio-operator +3 7.1.1-r1 —
Wolfi rolling mkcert 1.4.4-r14 —
Wolfi rolling mods 1.7.0-r6 —
Wolfi rolling mongo-tools 100.12.2-r1 —
Wolfi rolling multus-cni +1 4.2.1-r1 —
Wolfi rolling nats 0.2.3-r2 —
Wolfi rolling nats-server +1 2.11.4-r2 —
Wolfi rolling nats-top +1 0.6.3-r5 —
Wolfi rolling nerdctl 2.1.2-r2 —
Wolfi rolling neuvector-dbgen +1 0_git20240423-r5 —
Wolfi rolling newrelic-fluent-bit-output-compat 2.4.0-r5 —
Wolfi rolling newrelic-infra-operator 0.22.1-r1 —
Wolfi rolling newrelic-infrastructure-agent 1.64.0-r1 —
Wolfi rolling newrelic-k8s-metadata-injection +1 1.34.1-r2 —
Wolfi rolling newrelic-nri-kube-events 2.13.1-r1 —
Wolfi rolling newrelic-nri-statsd 2.11.0-r4 —
Wolfi rolling newrelic-prometheus-configurator 2.0.0-r1 —
Wolfi rolling nfs-subdir-external-provisioner 4.0.18-r22 —
Wolfi rolling nginx-prometheus-exporter +1 1.4.2-r2 —
Wolfi rolling nodetaint 0.0.4-r34 —
Wolfi rolling nri-cassandra +2 2.14.3-r2 —
Wolfi rolling nri-consul +1 2.9.1-r1 —
Wolfi rolling nri-couchbase +1 2.8.0-r3 —
Wolfi rolling nri-discovery-kubernetes +1 1.11.2-r2 —
Wolfi rolling nri-elasticsearch +1 5.4.0-r3 —
Wolfi rolling nri-f5 +1 2.8.3-r3 —
Wolfi rolling nri-haproxy +1 3.2.0-r2 —
Wolfi rolling nri-jmx +2 3.8.1-r2 —
Wolfi rolling nri-kafka +2 3.11.0-r1 —
Wolfi rolling nri-mongodb +1 2.9.2-r3 —
Wolfi rolling nri-mysql +1 1.15.0-r1 —
Wolfi rolling nri-nginx +1 3.6.0-r2 —
Wolfi rolling nri-postgresql +1 2.18.0-r1 —
Wolfi rolling nri-prometheus 2.25.0-r1 —
Wolfi rolling nri-rabbitmq +1 2.15.0-r2 —
Wolfi rolling nri-redis +1 1.12.1-r3 —
Wolfi rolling nsc +2 2.11.0-r2 —
Wolfi rolling oauth2-proxy +1 7.9.0-r2 —
Wolfi rolling ollama +1 0.9.0-r2 —
Wolfi rolling op-geth +6 1.101511.0-r1 —
Wolfi rolling opa +2 1.5.1-r1 —
Wolfi rolling openbao-k8s +1 1.4.0-r37 —
Wolfi rolling opencost +1 1.115.0-r2 —
Wolfi rolling opensearch-k8s-operator +1 2.7.0-r8 —
Wolfi rolling opentelemetry-operator +3 0.127.0-r1 —
Wolfi rolling oras 1.2.3-r1 —
Wolfi rolling osv-scanner 2.0.2-r1 —
Wolfi rolling otel-cli 0.4.5-r4 —
Wolfi rolling paranoia 0.4.0-r1 —
Wolfi rolling pdfcpu 0.11.0-r1 —
Wolfi rolling percona-server-mongodb-operator +2 1.20.1-r1 —
Wolfi rolling petname 2.11-r14 —
Wolfi rolling pg_timetable +1 5.13.0-r1 —
Wolfi rolling pgpool2_exporter 1.2.2-r3 —
Wolfi rolling php-fpm_exporter 2.2.0-r14 —
Wolfi rolling pluto +1 5.21.7-r1 —
Wolfi rolling podcli +2 6.9.0-r1 —
Wolfi rolling pombump 0.0.14-r1 —
Wolfi rolling portieris +1 0.13.28-r1 —
Wolfi rolling postgres-operator 1.14.0-r8 —
Wolfi rolling postgres-operator-compat 1.14.0-r9 —
Wolfi rolling prometheus-adapter +2 0.12.0-r13 —
Wolfi rolling prometheus-operator +3 0.83.0-r1 —
Wolfi rolling prometheus-pushgateway +1 1.11.1-r3 —
Wolfi rolling promxy 0.0.93-r1 —
Wolfi rolling protoc-gen-go 1.36.6-r2 —
Wolfi rolling protoc-gen-go-grpc 1.5.1-r5 —
Wolfi rolling pvc-autoresizer +1 0.17.3-r1 —
Wolfi rolling rabbitmq-default-user-credential-updater +1 1.0.6-r1 —
Wolfi rolling rancher-fleet +4 0.12.3-r2 —
Wolfi rolling rancher-helm-3 3.17.0-r2 —
Wolfi rolling rancher-loglevel 0.1.6-r5 —
Wolfi rolling rancher-system-agent 0.3.12-r2 —
Wolfi rolling rancher-telemetry 0.6.2-r2 —
Wolfi rolling redis-operator +1 0.20.2-r1 —
Wolfi rolling redka 0.5.3-r4 —
Wolfi rolling regclient +6 0.8.3-r1 —
Wolfi rolling rekor +3 1.3.10-r2 —
Wolfi rolling render-template 1.0.7-r6 —
Wolfi rolling restic +1 0.18.0-r3 —
Wolfi rolling rootlesskit +1 2.3.5-r2 —
Wolfi rolling runc +3 1.3.0-r1 —
Wolfi rolling s5cmd 2.3.0-r4 —
Wolfi rolling sbom-convert 0.0.7-r1 —
Wolfi rolling sbom-scorecard 0.0.7-r20 —
Wolfi rolling scorecard 5.2.1-r1 —
Wolfi rolling secrets-store-csi-driver-provider-aws 1.0.1-r1 —
Wolfi rolling secrets-store-csi-driver-provider-azure 1.7.0-r1 —
Wolfi rolling secrets-store-csi-driver-provider-gcp 1.8.0-r1 —
Wolfi rolling sftpgo 2.6.6-r5 —
Wolfi rolling sftpgo-plugin-auth 1.0.11-r4 —
Wolfi rolling sftpgo-plugin-eventstore +1 1.0.20-r4 —
Wolfi rolling sftpgo-plugin-geoipfilter 1.0.10-r4 —
Wolfi rolling sftpgo-plugin-kms 1.0.15-r6 —
Wolfi rolling sftpgo-plugin-pubsub 1.0.14-r5 —
Wolfi rolling shfmt 3.11.0-r2 —
Wolfi rolling sigstore-scaffolding +13 0.7.23-r2 —
Wolfi rolling skaffold 2.16.0-r2 —
Wolfi rolling skopeo 1.19.0-r1 —
Wolfi rolling slsa-verifier 2.7.0-r6 —
Wolfi rolling smarter-device-manager 1.20.11-r18 —
Wolfi rolling sonobuoy +1 0.57.3-r5 —
Wolfi rolling spark-operator +2 2.2.0-r1 —
Wolfi rolling speedtest-go 1.7.10-r4 —
Wolfi rolling spiffe-helper +1 0.10.0-r2 —
Wolfi rolling spire-controller-manager +1 0.6.2-r1 —
Wolfi rolling splunk-otel-collector +2 0.126.0-r1 —
Wolfi rolling spqr 2.6.0-r1 —
Wolfi rolling src 6.4.0-r1 —
Wolfi rolling sriov-network-device-plugin +1 3.9.0-r7 —
Wolfi rolling stakater-reloader +1 1.4.2-r1 —
Wolfi rolling steampipe 2.0.1-r0 —
Wolfi rolling step 0.28.6-r4 —
Wolfi rolling step-ca 0.28.3-r4 —
Wolfi rolling step-issuer +1 0.9.8-r3 —
Wolfi rolling step-kms-plugin +6 0.13.0-r1 —
Wolfi rolling stern 1.32.0-r6 —
Wolfi rolling supercronic 0.2.33-r4 —
Wolfi rolling tdbg +9 1.27.2-r3 —
Wolfi rolling temporal +1 1.3.0-r7 —
Wolfi rolling temporal-ui-server +1 2.37.4-r1 —
Wolfi rolling terraform +2 1.5.7-r29 —
Wolfi rolling terraform-docs 0.20.0-r2 —
Wolfi rolling terraform-mcp-server 0.1.0-r1 —
Wolfi rolling terraform-provider-acme 2.32.0-r1 —
Wolfi rolling terraform-provider-azapi 2.4.0-r1 —
Wolfi rolling terraform-provider-random 3.7.2-r1 —
Wolfi rolling terraform-provider-sendgrid 1.0.1-r4 —
Wolfi rolling terraform-provider-time 0.13.1-r1 —
Wolfi rolling terraform-provider-tls 4.1.0-r1 —
Wolfi rolling tflint +3 0.58.0-r1 —
Wolfi rolling thanos-operator +1 0.3.7-r31 —
Wolfi rolling traefik-3.3 3.3.7-r2 —
Wolfi rolling traefik-3.4 3.4.1-r1 —
Wolfi rolling trillian +2 1.7.2-r2 —
Wolfi rolling trivy 0.63.0-r1 —
Wolfi rolling trust-manager 0.17.1-r1 —
Wolfi rolling vault-benchmark +1 0.3.0-r36 —
Wolfi rolling vault-env +1 1.21.9-r2 —
Wolfi rolling vault-k8s 1.6.2-r4 —
Wolfi rolling vault-secrets-webhook +1 1.21.4-r4 —
Wolfi rolling velero +2 1.16.1-r1 —
Wolfi rolling velero-plugin-for-aws +3 1.12.1-r1 —
Wolfi rolling velero-plugin-for-csi +1 0.7.1-r35 —
Wolfi rolling vendir 0.44.0-r1 —
Wolfi rolling verticadb-operator +1 25.2.1.0-r1 —
Wolfi rolling volume-modifier-for-k8s 0.6.1-r1 —
Wolfi rolling wait-for-port 1.0.8-r7 —
Wolfi rolling wave 0.10.0-r8 —
Wolfi rolling wazero +1 1.9.0-r3 —
Wolfi rolling wgcf 2.2.26-r1 —
Wolfi rolling wire-go 0.6.0-r11 —
Wolfi rolling wireguard-go 0.0.20250522-r1 —
Wolfi rolling witness 0.9.2-r1 —
Wolfi rolling wuzz 0.5.0-r9 —
Wolfi rolling x509-certificate-exporter +1 3.18.1-r8 —
Wolfi rolling xcaddy 0.4.4-r4 —
Wolfi rolling yace 0.62.1-r5 —
Wolfi rolling yq 4.45.4-r1 —
Wolfi rolling ytt 0.52.0-r1 —
Wolfi rolling yunikorn-web +3 1.6.3-r1 —

Affected packages

EcosystemPackageAffectedFixedRecord
Go stdlib >= 1.24.0-0, < 1.24.4 1.24.4 GO-2025-3749

Advisories 33

References