Skip to content
OpenAdvisories
High · 7.0 CVE-2025-47907 BIT-golang-2025-47907EUVD-2025-23921GHSA-j5pm-7495-qmr3GO-2025-3849

Incorrect results returned from Rows.Scan in database/sql

Published Aug 7, 2025 · Updated Nov 4, 2025 · Assigned by Go

Vendor: Go standard library Product: database/sql Package: aactl Package: amass Package: amazon-cloudwatch-agent Package: amazon-cloudwatch-agent-all Package: amazon-cloudwatch-agent-amazon-cloudwatch-agent-config-wizard Package: amazon-cloudwatch-agent-compat Package: amazon-cloudwatch-agent-config-downloader Package: amazon-cloudwatch-agent-config-translator Package: amazon-cloudwatch-agent-start-amazon-cloudwatch-agent Package: amazon-k8s-cni Package: amazon-k8s-cni-compat Package: amazon-k8s-cni-init Package: amazon-k8s-cni-init-compat Package: apache-exporter Package: apko Package: argo-workflows Package: argocd-image-updater Package: argocd-image-updater-compat Package: atlantis Package: authservice Package: authservice-compat Package: aws-eks-pod-identity-agent Package: aws-eks-pod-identity-agent-compat Package: aws-flb-cloudwatch Package: aws-flb-cloudwatch-compat Package: aws-flb-firehose Package: aws-flb-firehose-compat Package: aws-flb-kinesis Package: aws-flb-kinesis-compat Package: aws-load-balancer-controller Package: aws-load-balancer-controller-compat Package: aws-network-policy-agent Package: aws-network-policy-agent-compat Package: aws-node-termination-handler Package: aws-node-termination-handler-compat Package: aws-nuke Package: aws-signer-notation-plugin Package: aws-sigv4-proxy Package: aws-sigv4-proxy-compat Package: azure-ipam Package: azure-ipam-dropgz Package: azure-service-operator Package: azure-service-operator-compat Package: azure-workload-identity-webhook Package: azure-workload-identity-webhook-compat Package: bazelisk Package: bazelisk-default Package: bento Package: bento-compat Package: bom Package: boring-registry Package: buf Package: buildctl Package: buildkitd Package: caddy Package: caddy-man Package: caddy-src Package: cargobump Package: cass-operator Package: cass-operator-compat Package: cass-operator-config Package: cerbos Package: cerbos-compat Package: cerbosctl Package: cerbosctl-compat Package: cert-exporter Package: cert-manager-cmctl Package: cert-manager-csi-driver Package: cert-manager-csi-driver-compat Package: cert-manager-istio-csr Package: cert-manager-istio-csr-compat Package: certificate-transparency Package: certificate-transparency-trillian-ctserver Package: cfssl Package: cfssl-bundle Package: cfssl-certinfo Package: cfssl-json Package: cfssl-mkbundle Package: cfssl-multirootca Package: cfssl-newkey Package: cfssl-scan Package: cilium-cli Package: cloudnative-pg Package: cloudnative-pg-plugins Package: cluster-api-aws-controller Package: cluster-api-aws-controller-compat Package: cluster-api-azure-controller Package: cluster-api-azure-controller-compat Package: cluster-api-gcp-controller Package: cluster-api-gcp-controller-compat Package: cluster-api-helm-controller Package: cluster-api-helm-controller-compat Package: cluster-api-ipam-provider-in-cluster Package: cluster-api-ipam-provider-in-cluster-compat Package: cluster-proportional-autoscaler Package: cluster-proportional-autoscaler-compat Package: configmap-reload Package: conftest Package: conjur-cli Package: containerd-1 Package: containerd-2 Package: containerd-service-1 Package: containerd-service-2 Package: containerd-shim-runc-v2-1 Package: containerd-shim-runc-v2-2 Package: containerd-stress-1 Package: containerd-stress-2 Package: cortex Package: cosign Package: cri-tools Package: crictl Package: critest Package: croc Package: crossplane-provider-azure-authorization Package: crossplane-provider-azure-authorization-compat Package: crossplane-provider-azure-managedidentity Package: crossplane-provider-azure-managedidentity-compat Package: crossplane-provider-azure-sql Package: crossplane-provider-azure-sql-compat Package: crossplane-provider-azure-storage Package: crossplane-provider-azure-storage-compat Package: crossplane-provider-family-azure Package: crossplane-provider-family-azure-compat Package: crossplane-provider-sql Package: ctr-1 Package: ctr-2 Package: dagger Package: dask-gateway Package: dask-gateway-server Package: db-operator Package: db-operator-compat Package: db-operator-oci-entrypoint Package: dbmate Package: dex Package: dex-iamguarded-compat Package: dgraph Package: direnv Package: dive Package: docker-cli Package: docker-cli-buildx Package: docker-cli-doc Package: docker-credential-gcr Package: docker-dind Package: docker-machine-driver-harvester Package: doppler-kubernetes-operator Package: dynamic-localpv-provisioner Package: eksctl Package: elvish Package: esbuild Package: etcd-3.6 Package: etcd-3.6-iamguarded-compat Package: extism Package: falco-exporter Package: falcoctl Package: falcosidekick Package: fixuid Package: fluent-bit-plugin-loki Package: flux Package: flux-helm-controller Package: flux-helm-controller-iamguarded-compat Package: flux-image-automation-controller Package: flux-image-automation-controller-compat Package: flux-image-automation-controller-iamguarded-compat Package: flux-image-reflector-controller Package: flux-image-reflector-controller-iamguarded-compat Package: flux-kustomize-controller Package: flux-kustomize-controller-iamguarded-compat Package: fluxcd-kustomize-mutating-webhook Package: fluxcd-kustomize-mutating-webhook-compat Package: flyte Package: fq Package: fscrypt Package: fulcio Package: fuse-overlayfs-snapshotter Package: gatus Package: gatus-compat Package: gh Package: gh-doc Package: ghaudit Package: git-credential-oauth Package: gitea Package: gitea-compat Package: gitlab-cng-18.2 Package: gitness Package: gke-gcloud-auth-plugin Package: glab Package: glow Package: go Package: go-1.20 Package: go-1.22 Package: go-md2man Package: go-md2man-doc Package: gobump Package: gofumpt Package: golang Package: golang-1.13 Package: golang-1.14 Package: golang-1.16 Package: golang-1.17 Package: golang-1.18 Package: golang-1.19 Package: golang-1.20 Package: golang-1.21 Package: golang-1.22 Package: golang-1.23 Package: golang-1.24 Package: golang-1.24 Package: golang-1.25 Package: golangci-lint Package: gomplate Package: gops Package: gosu Package: gotestsum Package: gpu-feature-discovery Package: grafana-agent-operator Package: grafana-rollout-operator Package: grpc-health-probe Package: grpc-health-probe-compat Package: grpcurl Package: guac Package: guaccsub Package: guacgql Package: guacingest Package: guacone Package: harbor-cli Package: harbor-registry Package: harbor-scanner-trivy Package: hcloud Package: hello-world-golang Package: helm Package: helm-3 Package: helm-4 Package: helm-docs Package: helm-mapkubeapis Package: helm-operator Package: helm-operator-compat Package: helm-push Package: helm-set-status Package: http-echo Package: hubble Package: hubble-compat Package: hugo-extended Package: hydra Package: incert Package: influx Package: ini-file Package: ip-masq-agent Package: ipfs-cluster Package: ipfs-cluster-compat Package: ipfs-cluster-oci-entrypoint Package: jaeger-operator Package: jaeger-operator-compat Package: jitsucom-bulker Package: jitsucom-bulker-bulker Package: jitsucom-bulker-bulker-compat Package: jitsucom-bulker-ingest Package: jitsucom-bulker-ingest-compat Package: jitsucom-bulker-ingmgr Package: jitsucom-bulker-ingmgr-compat Package: jitsucom-bulker-sidecar Package: jitsucom-bulker-sidecar-compat Package: jitsucom-bulker-syncctl Package: jitsucom-bulker-syncctl-compat Package: juicefs-1.3 Package: juicefs-1.3-compat Package: k3d Package: k3d-proxy Package: k3d-tools Package: k3s Package: k3s-1.32 Package: k3s-multicall Package: k3s-multicall-1.32 Package: k3s-static Package: k3s-static-1.32 Package: k6 Package: k8s_gateway Package: k8s_gateway-compat Package: k8s-device-plugin Package: k8sgpt Package: k8ssandra-client Package: k8ssandra-client-compat Package: k8ssandra-operator Package: k8ssandra-operator-compat Package: k9s Package: kaf Package: kafka_exporter Package: kaniko Package: kaniko-compat Package: kaniko-warmer Package: kaniko-warmer-compat Package: kapp-controller Package: kapp-controller-compat Package: karma Package: katib-controller Package: katib-controller-compat Package: katib-db-manager Package: katib-db-manager-compat Package: katib-earlystopping Package: katib-file-metricscollector Package: katib-file-metricscollector-compat Package: katib-suggestion-goptuna Package: katib-suggestion-goptuna-compat Package: katib-suggestion-hyperband Package: katib-suggestion-hyperopt Package: katib-suggestion-nas-darts Package: katib-suggestion-nas-enas Package: katib-suggestion-optuna-enas Package: katib-suggestion-pbt-enas Package: katib-suggestion-skopt-enas Package: katib-tfevent-metricscollector Package: kbld Package: kiali Package: kind Package: kine Package: kots Package: kots-compat Package: kots-symlink-compat Package: kpt Package: kratos Package: kratos-protoc-gen Package: ksops Package: ksops-compat Package: kube-bench Package: kube-bench-configs Package: kube-fluentd-operator Package: kube-fluentd-operator-compat Package: kube-fluentd-operator-default-config Package: kube-fluentd-operator-oci-entrypoint Package: kube-logging-operator Package: kube-logging-operator-compat Package: kube-logging-operator-config-reloader Package: kube-logging-operator-config-reloader-compat Package: kube-logging-operator-custom-runner Package: kube-logging-operator-custom-runner-compat Package: kube-logging-operator-fluentd-outputs Package: kube-metrics-adapter Package: kube-rbac-proxy Package: kube-state-metrics Package: kube-state-metrics-iamguarded-compat Package: kubebuilder Package: kubecolor Package: kubectl-1.29 Package: kubectl-1.29-default Package: kubectl-1.30 Package: kubectl-1.30-default Package: kubectl-1.31 Package: kubectl-1.31-default Package: kubectl-1.32 Package: kubectl-1.32-default Package: kubectl-1.33 Package: kubectl-1.33-default Package: kubectl-bash-completion-1.29 Package: kubectl-bash-completion-1.30 Package: kubeflow Package: kubeflow-access-management Package: kubeflow-access-management-compat Package: kubeflow-admission-webhook Package: kubeflow-admission-webhook-compat Package: kubeflow-katib Package: kubeflow-notebook-controller Package: kubeflow-notebook-controller-compat Package: kubeflow-profile-controller Package: kubeflow-profile-controller-compat Package: kubeflow-pvcviewer-controller Package: kubeflow-pvcviewer-controller-compat Package: kubeflow-tensorboard-controller Package: kubeflow-tensorboard-controller-compat Package: kubelet-csr-approver Package: kubelet-csr-approver-compat Package: kubernetes-csi-driver-hostpath Package: kubernetes-csi-driver-nfs Package: kubernetes-csi-driver-nfs-compat Package: kubernetes-csi-external-provisioner Package: kubernetes-dashboard Package: kubernetes-dashboard-api Package: kubernetes-dashboard-api-compat Package: kubernetes-dashboard-auth Package: kubernetes-dashboard-auth-compat Package: kubernetes-dashboard-metrics-scraper Package: kubernetes-dashboard-metrics-scraper-compat Package: kubernetes-dashboard-web Package: kubernetes-dashboard-web-compat Package: kubernetes-dns-node-cache Package: kubernetes-release Package: kubernetes-release-go-runner Package: kubernetes-replicator Package: kubescape Package: kubescape-operator Package: kubevela Package: kubevela-vela-cli Package: kubevela-vela-core Package: kubevela-vela-core-compat Package: kubewatch Package: kubo Package: kubo-compat Package: kyverno-policy-reporter Package: kyverno-policy-reporter-compat Package: lazygit Package: licenseclassifier Package: local-static-provisioner Package: local-static-provisioner-compat Package: local-volume-node-cleanup Package: local-volume-node-cleanup-compat Package: logstash-8-with-output-opensearch Package: logstash-exporter Package: malcontent Package: mc Package: mc-iamguarded-2025-compat Package: memcached-exporter Package: memcached-exporter-iamguarded-compat Package: metallb Package: metallb-controller Package: metallb-controller-compat Package: metallb-cp-tool Package: metallb-cp-tool-compat Package: metallb-frr Package: metallb-frr-compat Package: metallb-speaker Package: metallb-speaker-compat Package: metrics-server Package: metrics-server-compat Package: metrics-server-iamguarded-compat Package: migrate Package: migrate-compat Package: minio Package: minio-iamguarded-2025-compat Package: minio-operator Package: minio-operator-compat Package: minio-operator-sidecar Package: minio-operator-sidecar-compat Package: mkcert Package: mods Package: mongo-tools Package: mps-control-daemon Package: nerdctl Package: neuvector-db-updater Package: neuvector-dbgen Package: newrelic-fluent-bit-output-compat Package: newrelic-infra-operator Package: newrelic-nri-kube-events Package: nfs-subdir-external-provisioner Package: nginx-prometheus-exporter Package: nginx-prometheus-exporter-iamguarded-compat Package: nova Package: nova-compat Package: nri-cassandra Package: nri-cassandra-compat Package: nri-cassandra-jdk11 Package: nri-discovery-kubernetes Package: nri-discovery-kubernetes-compat Package: nri-kafka Package: nri-kafka-compat Package: nri-kafka-jdk11 Package: nri-memcached Package: nri-memcached-compat Package: nri-mssql Package: nri-mssql-compat Package: nri-mysql Package: nri-mysql-compat Package: nri-nagios Package: nri-nagios-compat Package: nri-postgresql Package: nri-postgresql-compat Package: nri-rabbitmq Package: nri-rabbitmq-compat Package: nri-redis Package: nri-redis-compat Package: nuclei Package: nvidia-container-toolkit Package: nvidia-container-toolkit-nvidia-cdi-hook Package: nvidia-container-toolkit-nvidia-container-runtime Package: nvidia-container-toolkit-nvidia-container-runtime-cdi Package: nvidia-container-toolkit-nvidia-container-runtime-hook Package: nvidia-container-toolkit-nvidia-container-runtime-legacy Package: nvidia-container-toolkit-nvidia-ctk Package: nvidia-container-toolkit-nvidia-ctk-installer Package: nvidia-container-toolkit-nvidia-toolkit Package: nvidia-device-plugin Package: op-geth Package: op-geth-abigen Package: op-geth-clef Package: op-geth-compat Package: op-geth-devp2p Package: op-geth-evm Package: op-geth-rlpdump Package: opa Package: openbao-k8s Package: openbao-k8s-compat Package: openfga Package: openfga-compat Package: openfga-healthcheck-compat Package: opensearch-k8s-operator Package: opensearch-k8s-operator-compat Package: opentelemetry-collector Package: opentelemetry-collector-compat Package: opentelemetry-collector-contrib Package: opentelemetry-collector-contrib-compat Package: opentelemetry-collector-ocb Package: opentofu-1.9 Package: otel-cli Package: overmind Package: paranoia Package: pdfcpu Package: petname Package: pg_user Package: pgpool2_exporter Package: podcli Package: podinfo Package: podinfo-compat Package: podman Package: podman-doc Package: polaris Package: policy-controller Package: policy-controller-tester Package: pombump Package: portieris Package: portieris-compat Package: postgres-operator Package: postgres-operator-compat Package: prometheus-admission-webhook Package: prometheus-config-reloader Package: prometheus-operator Package: prometheus-operator-iamguarded-compat Package: promxy Package: pulumi-language-java Package: rabbitmq-messaging-topology-operator Package: rabbitmq-messaging-topology-operator-compat Package: rabbitmq-messaging-topology-operator-iamguarded-compat Package: rancher-fleet Package: rancher-fleet-agent Package: rancher-fleet-cli Package: rancher-fleet-controller Package: rancher-fleet-termination-log Package: rancher-helm-3 Package: rancher-loglevel Package: rancher-system-agent Package: rancher-telemetry Package: ratify Package: ratify-compat Package: ratify-crds Package: ratify-licensechecker Package: ratify-licensechecker-compat Package: ratify-sbom Package: ratify-sbom-compat Package: ratify-schemavalidator Package: ratify-schemavalidator-compat Package: ratify-vulnerabilityreport Package: ratify-vulnerabilityreport-compat Package: rclone Package: rclone-compat Package: redka Package: rekor Package: rekor-backfill-index Package: rekor-cli Package: rekor-server Package: render-template Package: restic Package: restic-compat Package: rke2-cloud-provider Package: rke2-cloud-provider-compat Package: rook Package: rook-oci-compat Package: runc Package: runc-doc Package: s5cmd Package: sbom-convert Package: sbom-scorecard Package: sbomqs Package: seaweedfs Package: seaweedfs-iamguarded-compat Package: seaweedfs-oci-entrypoint Package: secrets-store-csi-driver-provider-azure Package: secrets-store-csi-driver-provider-gcp Package: sftpgo-plugin-eventsearch Package: sftpgo-plugin-eventstore Package: sftpgo-plugin-kms Package: sigstore-scaffolding Package: sigstore-scaffolding-cloudsqlproxy Package: sigstore-scaffolding-ctlog-createctconfig Package: sigstore-scaffolding-ctlog-managectroots Package: sigstore-scaffolding-ctlog-verifyfulcio Package: sigstore-scaffolding-fulcio-createcerts Package: sigstore-scaffolding-getoidctoken Package: sigstore-scaffolding-rekor-createsecret Package: sigstore-scaffolding-trillian-createdb Package: sigstore-scaffolding-trillian-createtree Package: sigstore-scaffolding-trillian-updatetree Package: sigstore-scaffolding-tsa-createcertchain Package: sigstore-scaffolding-tuf-createsecret Package: sigstore-scaffolding-tuf-server Package: skaffold Package: skopeo Package: slsa-verifier Package: smarter-device-manager Package: snyk-cli Package: spegel Package: spegel-compat Package: spicedb Package: spicedb-compat Package: spiffe-helper Package: spiffe-helper-compat Package: spire-agent Package: spire-oidc-discovery-provider Package: spire-server Package: splunk-otel-collector Package: splunk-otel-collector-compat Package: splunk-otel-collector-doc Package: sql_exporter Package: src Package: stdlib Package: steampipe Package: step Package: step-ca Package: step-issuer Package: step-issuer-compat Package: supercronic Package: swagger Package: temporal Package: temporal-compat Package: terraform Package: terraform-compat Package: terraform-local-provider-config Package: terraform-provider-azapi Package: terraform-provider-kubernetes Package: terraform-provider-sendgrid Package: terragrunt Package: terragrunt-docs Package: tflint Package: tflint-compat Package: thanos Package: thanos-iamguarded-compat Package: timescaledb-parallel-copy Package: tofu-controller Package: tofu-controller-compat Package: tofu-controller-runner Package: tofu-controller-runner-compat Package: trillian Package: trillian-logserver Package: trillian-logsigner Package: trino Package: trino-config Package: trino-oci-entrypoint Package: trino-plugin-ai-functions Package: trino-plugin-bigquery Package: trino-plugin-blackhole Package: trino-plugin-cassandra Package: trino-plugin-clickhouse Package: trino-plugin-delta-lake Package: trino-plugin-druid Package: trino-plugin-duckdb Package: trino-plugin-elasticsearch Package: trino-plugin-exasol Package: trino-plugin-exchange-filesystem Package: trino-plugin-exchange-hdfs Package: trino-plugin-faker Package: trino-plugin-functions-python Package: trino-plugin-geospatial Package: trino-plugin-google-sheets Package: trino-plugin-hive Package: trino-plugin-http-event-listener Package: trino-plugin-http-server-event-listener Package: trino-plugin-hudi Package: trino-plugin-iceberg Package: trino-plugin-ignite Package: trino-plugin-jmx Package: trino-plugin-kafka Package: trino-plugin-kafka-event-listener Package: trino-plugin-lakehouse Package: trino-plugin-ldap-group-provider Package: trino-plugin-loki Package: trino-plugin-mariadb Package: trino-plugin-memory Package: trino-plugin-ml Package: trino-plugin-mongodb Package: trino-plugin-mysql Package: trino-plugin-mysql-event-listener Package: trino-plugin-opa Package: trino-plugin-openlineage Package: trino-plugin-opensearch Package: trino-plugin-oracle Package: trino-plugin-password-authenticators Package: trino-plugin-pinot Package: trino-plugin-postgresql Package: trino-plugin-prometheus Package: trino-plugin-ranger Package: trino-plugin-redis Package: trino-plugin-redshift Package: trino-plugin-resource-group-managers Package: trino-plugin-session-property-managers Package: trino-plugin-singlestore Package: trino-plugin-snowflake Package: trino-plugin-spooling-filesystem Package: trino-plugin-sqlserver Package: trino-plugin-teradata-functions Package: trino-plugin-thrift Package: trino-plugin-tpcds Package: trino-plugin-tpch Package: trino-plugin-vertica Package: trivy Package: trivy-operator Package: trufflehog Package: trust-manager Package: undock Package: vault-env Package: vault-env-compat Package: velero Package: velero-compat Package: velero-restore-helper Package: verticadb-operator Package: verticadb-operator-compat Package: victoriametrics-cluster Package: victoriametrics-operator Package: victoriametrics-operator-compat Package: victoriametrics-vmagent-cluster Package: victoriametrics-vmagent-cluster-compat Package: victoriametrics-vmalert-cluster Package: victoriametrics-vmalert-cluster-compat Package: victoriametrics-vminsert-cluster Package: victoriametrics-vminsert-cluster-compat Package: victoriametrics-vmselect-cluster Package: victoriametrics-vmselect-cluster-compat Package: victoriametrics-vmstorage-cluster Package: victoriametrics-vmstorage-cluster-compat Package: volume-modifier-for-k8s Package: vt-cli Package: wait-for-port Package: weaviate Package: witness Package: wolfictl Package: xeol Package: xeol-compat Package: yace Package: yam Package: yq Package: ytt Package: yunikorn-k8shim Package: yunikorn-k8shim-compat Package: yunikorn-web Package: yunikorn-web-compat Package: zot Ecosystem: Alpine Ecosystem: Azure Linux Ecosystem: Debian Ecosystem: Go Ecosystem: Ubuntu Ecosystem: Wolfi

Description

Cancelling a query (e.g. by cancelling the context passed to one of the query methods) during a call to the Scan method of the returned Rows can result in unexpected results if other queries are being made in parallel. This can result in a race condition that may overwrite the expected results with those of another query, causing the call to Scan to return either unexpected results from the other query or an error.

Affected products

VendorProductAffectedFixed
Go standard library database/sql < 1.23.12, 1.24.0 – < 1.24.6 1.23.12

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 13 golang-1.24 No fix yet —
Debian 12 golang-1.19 No fix yet —

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 26.04 LTS golang-1.23 No fix yet —
Ubuntu 25.10 golang-1.23 +1 No fix yet —
Ubuntu 24.04 LTS golang-1.21 +3 No fix yet —
Ubuntu 22.04 LTS golang-1.17 +6 No fix yet —
Ubuntu 20.04 LTS golang-1.13 +5 No fix yet —
Show 4 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu Pro 22.04 LTS golang-1.13 No fix yet —
Ubuntu Pro 20.04 LTS golang-1.16 No fix yet —
Ubuntu Pro 18.04 LTS golang-1.13 +2 No fix yet —
Ubuntu Pro 16.04 LTS golang-1.13 +1 No fix yet —

Red Hat

Security tracker ↗
ReleasePackageFixed inAdvisory
RHEL 10 golang +7 1.24.6-1.el10_0 RHSA-2025:13941
RHEL 10 podman +3 7:5.6.0-5.el10_1 RHSA-2025:20983
RHEL 9 golang +7 1.24.6-1.el9_6 RHSA-2025:13935
RHEL 9 podman +4 6:5.6.0-6.el9_7 RHSA-2025:20909
Show 11 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
RHEL 9.6 EUS podman +4 5:5.4.0-18.el9_6 RHSA-2026:1084
RHEL 9.4 EUS golang +6 1.21.13-11.el9_4 RHSA-2025:19397
RHEL 9.4 EUS podman +4 4:4.9.4-18.el9_4.4 RHSA-2025:19731
RHEL 9.2 E4S golang +6 1.19.13-19.el9_2 RHSA-2025:21337
RHEL 9.0 E4S golang +6 1.17.13-7.el9_0 RHSA-2025:21336
RHEL 8.8 TUS delve 1.9.1-1.module+el8.8.0+16778+5fbb74f5 RHSA-2025:21382
RHEL 8.8 TUS go-toolset 1.19.13-3.module+el8.8.0+22903+37387f31 RHSA-2025:21382
RHEL 8.8 TUS golang +6 1.19.13-17.module+el8.8.0+23626+e3eba141 RHSA-2025:21382
RHEL 8.8 E4S delve 1.9.1-1.module+el8.8.0+16778+5fbb74f5 RHSA-2025:21382
RHEL 8.8 E4S go-toolset 1.19.13-3.module+el8.8.0+22903+37387f31 RHSA-2025:21382
RHEL 8.8 E4S golang +6 1.19.13-17.module+el8.8.0+23626+e3eba141 RHSA-2025:21382
RHEL 8.6 TUS delve 1.7.2-1.module+el8.6.0+12972+ebab5911 RHSA-2025:21384
RHEL 8.6 TUS go-toolset 1.17.13-2.module+el8.6.0+22782+bd95fb4c RHSA-2025:21384
RHEL 8.6 TUS golang +6 1.17.13-10.module+el8.6.0+23632+877f48ed RHSA-2025:21384
RHEL 8.6 E4S delve 1.7.2-1.module+el8.6.0+12972+ebab5911 RHSA-2025:21384
RHEL 8.6 E4S go-toolset 1.17.13-2.module+el8.6.0+22782+bd95fb4c RHSA-2025:21384
RHEL 8.6 E4S golang +6 1.17.13-10.module+el8.6.0+23632+877f48ed RHSA-2025:21384
RHEL 8.6 AUS delve 1.7.2-1.module+el8.6.0+12972+ebab5911 RHSA-2025:21384
RHEL 8.6 AUS go-toolset 1.17.13-2.module+el8.6.0+22782+bd95fb4c RHSA-2025:21384
RHEL 8.6 AUS golang +6 1.17.13-10.module+el8.6.0+23632+877f48ed RHSA-2025:21384
RHEL 8.4 AUS delve 1.5.0-2.module+el8.4.0+8864+58b0fcdb RHSA-2025:21385
RHEL 8.4 AUS go-toolset 1.15.14-3.module+el8.4.0+22765+91da4d3f RHSA-2025:21385
RHEL 8.4 AUS golang +6 1.15.14-16.module+el8.4.0+23635+6912b903 RHSA-2025:21385
RHEL 8.2 AUS delve 1.3.2-3.module+el8.2.0+5581+896cb53e RHSA-2025:21383
RHEL 8.2 AUS go-toolset 1.13.15-1.module+el8.2.0+7662+fa98b974 RHSA-2025:21383
RHEL 8.2 AUS golang +6 1.13.15-11.module+el8.2.0+23627+d458f451 RHSA-2025:21383

AlmaLinux

Errata ↗
ReleasePackageFixed inAdvisory
AlmaLinux 10 golang-src +3 1.24.6-1.el10_0.alma.1 ALSA-2025:13941
AlmaLinux 10 podman +3 7:5.6.0-5.el10_1 ALSA-2025:20983
AlmaLinux 9 podman +4 6:5.6.0-6.el9_7 ALSA-2025:20909

SUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
SLES 15 SP7 azure-storage-azcopy 10.32.4-150400.9.11.1 SUSE-SU-2026:2466-1
SLES 15 SP7 go1.23 1.23.12-150000.1.40.1 SUSE-SU-2025:02759-1
SLES 15 SP7 go1.23-openssl 1.23.12-150600.13.9.1 SUSE-SU-2025:03159-1
SLES 15 SP7 go1.24 1.24.6-150000.1.32.1 SUSE-SU-2025:02760-1
SLES 15 SP7 go1.24-openssl 1.24.6-150600.13.9.1 SUSE-SU-2025:03158-1
SLES 15 SP7 go1.25 1.25.0-150000.1.5.1 SUSE-SU-2025:02924-1
SLES 15 SP7 go1.25-openssl 1.25.0-150600.13.3.1 SUSE-SU-2026:0298-1, SUSE-SU-2025:03161-1
SLES 15 SP6 azure-storage-azcopy 10.32.4-150400.9.11.1 SUSE-SU-2026:2466-1
SLES 15 SP6 go1.23 1.23.12-150000.1.40.1 SUSE-SU-2025:02759-1
SLES 15 SP6 go1.23-openssl 1.23.12-150600.13.9.1 SUSE-SU-2025:03159-1
SLES 15 SP6 go1.24 1.24.6-150000.1.32.1 SUSE-SU-2025:02760-1
SLES 15 SP6 go1.24-openssl 1.24.6-150600.13.9.1 SUSE-SU-2025:03158-1
SLES 15 SP6 go1.25 1.25.0-150000.1.5.1 SUSE-SU-2025:02924-1
SLES 15 SP6 go1.25-openssl 1.25.0-150600.13.3.1 SUSE-SU-2026:0298-1, SUSE-SU-2025:03161-1
SLES 15 SP6 govulncheck-vulndb 0.0.20250814T182633-150000.1.98.1 SUSE-SU-2025:02912-1
SLES 15 SP5 azure-storage-azcopy 10.32.4-150400.9.11.1 SUSE-SU-2026:2466-1
SLES 15 SP5 go1.23 1.23.12-150000.1.40.1 SUSE-SU-2025:02759-1
SLES 15 SP5 go1.23-openssl 1.23.12-150000.1.18.1 SUSE-SU-2025:02812-1
SLES 15 SP5 go1.24 1.24.6-150000.1.32.1 SUSE-SU-2025:02760-1
SLES 15 SP5 go1.24-openssl 1.24.6-150000.1.12.1 SUSE-SU-2025:02837-1
SLES 15 SP5 go1.25 1.25.0-150000.1.5.1 SUSE-SU-2025:02924-1
SLES 15 SP5 go1.25-openssl 1.25.0-150000.1.3.1 SUSE-SU-2026:0297-1, SUSE-SU-2025:03115-1
SLES 15 SP4 azure-storage-azcopy 10.32.4-150400.9.11.1 SUSE-SU-2026:2466-1
SLES 15 SP4 go1.23 1.23.12-150000.1.40.1 SUSE-SU-2025:02759-1
SLES 15 SP4 go1.23-openssl 1.23.12-150000.1.18.1 SUSE-SU-2025:02812-1
SLES 15 SP4 go1.24 1.24.6-150000.1.32.1 SUSE-SU-2025:02760-1
SLES 15 SP4 go1.24-openssl 1.24.6-150000.1.12.1 SUSE-SU-2025:02837-1
SLES 15 SP4 go1.25 1.25.0-150000.1.5.1 SUSE-SU-2025:02924-1
SLES 15 SP4 go1.25-openssl 1.25.0-150000.1.3.1 SUSE-SU-2026:0297-1, SUSE-SU-2025:03115-1
SLES 15 SP3 go1.23 1.23.12-150000.1.40.1 SUSE-SU-2025:02759-1
SLES 15 SP3 go1.23-openssl 1.23.12-150000.1.18.1 SUSE-SU-2025:02812-1
SLES 15 SP3 go1.24 1.24.6-150000.1.32.1 SUSE-SU-2025:02760-1
SLES 15 SP3 go1.24-openssl 1.24.6-150000.1.12.1 SUSE-SU-2025:02837-1
SLES 15 SP3 go1.25 1.25.0-150000.1.5.1 SUSE-SU-2025:02924-1
SLES 15 SP3 go1.25-openssl 1.25.0-150000.1.3.1 SUSE-SU-2025:03115-1
Show 8 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES for SAP 15 SP6 go1.25-openssl 1.25.6-150600.13.9.1 SUSE-SU-2026:0298-1
SLES for SAP 15 SP5 go1.23 1.23.12-150000.1.40.1 SUSE-SU-2025:02759-1
SLES for SAP 15 SP5 go1.23-openssl 1.23.12-150000.1.18.1 SUSE-SU-2025:02812-1
SLES for SAP 15 SP5 go1.24 1.24.6-150000.1.32.1 SUSE-SU-2025:02760-1
SLES for SAP 15 SP5 go1.24-openssl 1.24.6-150000.1.12.1 SUSE-SU-2025:02837-1
SLES for SAP 15 SP5 go1.25 1.25.0-150000.1.5.1 SUSE-SU-2025:02924-1
SLES for SAP 15 SP5 go1.25-openssl 1.25.0-150000.1.3.1 SUSE-SU-2026:0297-1, SUSE-SU-2025:03115-1
SLES for SAP 15 SP4 go1.23 1.23.12-150000.1.40.1 SUSE-SU-2025:02759-1
SLES for SAP 15 SP4 go1.23-openssl 1.23.12-150000.1.18.1 SUSE-SU-2025:02812-1
SLES for SAP 15 SP4 go1.24 1.24.6-150000.1.32.1 SUSE-SU-2025:02760-1
SLES for SAP 15 SP4 go1.24-openssl 1.24.6-150000.1.12.1 SUSE-SU-2025:02837-1
SLES for SAP 15 SP4 go1.25 1.25.0-150000.1.5.1 SUSE-SU-2025:02924-1
SLES for SAP 15 SP4 go1.25-openssl 1.25.0-150000.1.3.1 SUSE-SU-2026:0297-1, SUSE-SU-2025:03115-1
SLES for SAP 15 SP3 go1.23 1.23.12-150000.1.40.1 SUSE-SU-2025:02759-1
SLES for SAP 15 SP3 go1.23-openssl 1.23.12-150000.1.18.1 SUSE-SU-2025:02812-1
SLES for SAP 15 SP3 go1.24 1.24.6-150000.1.32.1 SUSE-SU-2025:02760-1
SLES for SAP 15 SP3 go1.24-openssl 1.24.6-150000.1.12.1 SUSE-SU-2025:02837-1
SLES for SAP 15 SP3 go1.25 1.25.0-150000.1.5.1 SUSE-SU-2025:02924-1
SLES for SAP 15 SP3 go1.25-openssl 1.25.0-150000.1.3.1 SUSE-SU-2025:03115-1
SLE HPC 15 SP5 go1.23 1.23.12-150000.1.40.1 SUSE-SU-2025:02759-1
SLE HPC 15 SP5 go1.23-openssl 1.23.12-150000.1.18.1 SUSE-SU-2025:02812-1
SLE HPC 15 SP5 go1.24 1.24.6-150000.1.32.1 SUSE-SU-2025:02760-1
SLE HPC 15 SP5 go1.24-openssl 1.24.6-150000.1.12.1 SUSE-SU-2025:02837-1
SLE HPC 15 SP5 go1.25 1.25.0-150000.1.5.1 SUSE-SU-2025:02924-1
SLE HPC 15 SP5 go1.25-openssl 1.25.0-150000.1.3.1 SUSE-SU-2026:0297-1, SUSE-SU-2025:03115-1
SLE HPC 15 SP4 go1.23 1.23.12-150000.1.40.1 SUSE-SU-2025:02759-1
SLE HPC 15 SP4 go1.23-openssl 1.23.12-150000.1.18.1 SUSE-SU-2025:02812-1
SLE HPC 15 SP4 go1.24 1.24.6-150000.1.32.1 SUSE-SU-2025:02760-1
SLE HPC 15 SP4 go1.24-openssl 1.24.6-150000.1.12.1 SUSE-SU-2025:02837-1
SLE HPC 15 SP4 go1.25 1.25.0-150000.1.5.1 SUSE-SU-2025:02924-1
SLE HPC 15 SP4 go1.25-openssl 1.25.0-150000.1.3.1 SUSE-SU-2026:0297-1, SUSE-SU-2025:03115-1
SLE HPC 15 SP3 go1.23 1.23.12-150000.1.40.1 SUSE-SU-2025:02759-1
SLE HPC 15 SP3 go1.23-openssl 1.23.12-150000.1.18.1 SUSE-SU-2025:02812-1
SLE HPC 15 SP3 go1.24 1.24.6-150000.1.32.1 SUSE-SU-2025:02760-1
SLE HPC 15 SP3 go1.24-openssl 1.24.6-150000.1.12.1 SUSE-SU-2025:02837-1
SLE HPC 15 SP3 go1.25 1.25.0-150000.1.5.1 SUSE-SU-2025:02924-1
SLE HPC 15 SP3 go1.25-openssl 1.25.0-150000.1.3.1 SUSE-SU-2025:03115-1
SUSE Enterprise Storage 7.1 go1.23 1.23.12-150000.1.40.1 SUSE-SU-2025:02759-1
SUSE Enterprise Storage 7.1 go1.23-openssl 1.23.12-150000.1.18.1 SUSE-SU-2025:02812-1
SUSE Enterprise Storage 7.1 go1.24 1.24.6-150000.1.32.1 SUSE-SU-2025:02760-1
SUSE Enterprise Storage 7.1 go1.24-openssl 1.24.6-150000.1.12.1 SUSE-SU-2025:02837-1
SUSE Enterprise Storage 7.1 go1.25 1.25.0-150000.1.5.1 SUSE-SU-2025:02924-1
SUSE Enterprise Storage 7.1 go1.25-openssl 1.25.0-150000.1.3.1 SUSE-SU-2025:03115-1

openSUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed azure-storage-azcopy 10.30.1-1.1 openSUSE-SU-2025:15594-1
openSUSE Tumbleweed clair 4.9.0-1.1 openSUSE-SU-2025:15823-1
openSUSE Tumbleweed go1.23 1.23.12-1.1 openSUSE-SU-2025:15422-1
openSUSE Tumbleweed go1.24 1.24.6-1.1 openSUSE-SU-2025:15423-1
openSUSE Tumbleweed go1.25 1.25rc3-1.1 openSUSE-SU-2025:15420-1
openSUSE Tumbleweed govulncheck-vulndb 0.0.20250807T150727-1.1 openSUSE-SU-2025:15424-1
openSUSE Tumbleweed nova 3.11.8-1.1 openSUSE-SU-2025:15464-1
openSUSE Tumbleweed pluto 5.22.5-1.1 openSUSE-SU-2025:15465-1
openSUSE Tumbleweed polaris 10.1.1-1.1 openSUSE-SU-2025:15466-1
openSUSE Leap 15.6 go1.23 1.23.12-150000.1.40.1 SUSE-SU-2025:02759-1
openSUSE Leap 15.6 go1.23-openssl 1.23.12-150600.13.9.1 SUSE-SU-2025:03159-1
openSUSE Leap 15.6 go1.24 1.24.6-150000.1.32.1 SUSE-SU-2025:02760-1
openSUSE Leap 15.6 go1.24-openssl 1.24.6-150600.13.9.1 SUSE-SU-2025:03158-1
openSUSE Leap 15.6 go1.25 1.25.0-150000.1.5.1 SUSE-SU-2025:02924-1
openSUSE Leap 15.6 go1.25-openssl 1.25.0-150600.13.3.1 SUSE-SU-2026:0298-1, SUSE-SU-2025:03161-1
openSUSE Leap 15.6 govulncheck-vulndb 0.0.20250814T182633-150000.1.98.1 SUSE-SU-2025:02912-1

Alpine

Security tracker ↗
ReleasePackageFixed inAdvisory
Alpine v3.24 go 1.24.6-r0 —
Alpine v3.23 go 1.24.6-r0 —
Alpine v3.22 go 1.24.6-r0 —

Amazon Linux

ReleasePackageFixed inAdvisory
Amazon Linux 2023 golang +6 1.24.6-1.amzn2023.0.1 ALAS2023-2025-1161
Amazon Linux 2 golang +6 1.24.6-1.amzn2.0.1 ALAS2-2025-2984

Azure Linux

ReleasePackageFixed inAdvisory
Azure Linux 3 golang 1.23.12-1 —
Azure Linux 2 (CBL-Mariner) golang 1.18.8-9 —

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 10 podman +3 7:5.6.0-6.0.1.el10_1 ELSA-2025-20983
Oracle Linux 9 podman +4 6:5.6.0-6.0.1.el9_7 ELSA-2025-20909

Wolfi

ReleasePackageFixed inAdvisory
Wolfi rolling aactl 0.4.12-r34 —
Wolfi rolling amass 5.0.0-r1 —
Wolfi rolling amazon-cloudwatch-agent +6 1.300058.1-r1 —
Wolfi rolling amazon-k8s-cni +3 1.20.1-r1 —
Wolfi rolling apache-exporter 1.0.10-r1 —
Wolfi rolling apko 0.30.4-r0 —
Wolfi rolling argo-workflows 3.7.0-r2 —
Wolfi rolling argocd-image-updater +1 0.16.0-r6 —
Wolfi rolling atlantis 0.35.1-r1 —
Wolfi rolling authservice +1 1.0.4-r10 —
Wolfi rolling aws-eks-pod-identity-agent +1 0.1.32-r2 —
Wolfi rolling aws-flb-cloudwatch +1 1.9.4-r19 —
Wolfi rolling aws-flb-firehose +1 1.7.2-r19 —
Wolfi rolling aws-flb-kinesis +1 1.10.2-r20 —
Wolfi rolling aws-load-balancer-controller +1 2.13.4-r1 —
Wolfi rolling aws-network-policy-agent +1 1.2.3-r3 —
Wolfi rolling aws-node-termination-handler +1 1.25.2-r1 —
Wolfi rolling aws-nuke 3.56.2-r2 —
Wolfi rolling aws-signer-notation-plugin 1.0.2292-r2 —
Wolfi rolling aws-sigv4-proxy +1 1.10-r2 —
Wolfi rolling azure-service-operator +1 2.14.0-r2 —
Wolfi rolling azure-workload-identity-webhook +1 1.5.1-r2 —
Wolfi rolling bazelisk +2 1.26.0-r3 —
Wolfi rolling bento +2 1.9.1-r1 —
Wolfi rolling bom 0.6.0-r23 —
Wolfi rolling boring-registry 0.16.4-r4 —
Wolfi rolling buf 1.56.0-r1 —
Wolfi rolling buildctl +1 0.23.2-r3 —
Wolfi rolling caddy +2 2.10.0-r5 —
Wolfi rolling cargobump 0.1.0-r6 —
Wolfi rolling cass-operator +4 1.26.0-r1 —
Wolfi rolling cerbos +3 0.46.0-r1 —
Wolfi rolling cert-exporter 2.16.0-r1 —
Wolfi rolling cert-manager-cmctl 2.3.0-r3 —
Wolfi rolling cert-manager-csi-driver +1 0.10.4-r2 —
Wolfi rolling cert-manager-istio-csr +1 0.14.2-r2 —
Wolfi rolling certificate-transparency +1 1.3.2-r3 —
Wolfi rolling cfssl +7 1.6.5-r22 —
Wolfi rolling cilium-cli 0.18.6-r1 —
Wolfi rolling cloudnative-pg +1 1.26.1-r1 —
Wolfi rolling cluster-api-aws-controller +1 2.8.4-r3 —
Wolfi rolling cluster-api-azure-controller +1 1.20.2-r1 —
Wolfi rolling cluster-api-gcp-controller +1 1.10.0-r3 —
Wolfi rolling cluster-api-helm-controller +1 0.3.2-r3 —
Wolfi rolling cluster-api-ipam-provider-in-cluster +1 1.0.3-r1 —
Wolfi rolling cluster-proportional-autoscaler +1 1.10.2-r6 —
Wolfi rolling configmap-reload 0.15.0-r3 —
Wolfi rolling conftest 0.62.0-r2 —
Wolfi rolling conjur-cli 8.1.2-r1 —
Wolfi rolling cortex 1.19.0-r9 —
Wolfi rolling cosign 2.5.3-r1 —
Wolfi rolling crictl +2 1.33.0-r3 —
Wolfi rolling croc 10.2.4-r1 —
Wolfi rolling crossplane-provider-azure-sql +9 1.13.0-r3 —
Wolfi rolling crossplane-provider-sql 0.12.0-r3 —
Wolfi rolling ctr-1 +4 1.7.28-r1 —
Wolfi rolling ctr-2 +4 2.1.4-r1 —
Wolfi rolling dagger 0.18.14-r2 —
Wolfi rolling dask-gateway +1 2025.4.0-r3 —
Wolfi rolling db-operator +2 2.14.0-r1 —
Wolfi rolling dbmate 2.28.0-r1 —
Wolfi rolling dex +1 2.43.1-r4 —
Wolfi rolling dgraph 24.1.3-r3 —
Wolfi rolling direnv 2.37.1-r1 —
Wolfi rolling dive 0.13.1-r6 —
Wolfi rolling docker-cli +2 28.3.3-r2 —
Wolfi rolling docker-cli-buildx 0.26.1-r2 —
Wolfi rolling docker-credential-gcr 2.1.30-r2 —
Wolfi rolling docker-machine-driver-harvester 1.0.3-r2 —
Wolfi rolling doppler-kubernetes-operator 1.6.0-r3 —
Wolfi rolling dynamic-localpv-provisioner 4.3.0-r3 —
Wolfi rolling eksctl 0.212.0-r1 —
Wolfi rolling elvish 0.21.0-r6 —
Wolfi rolling esbuild 0.25.8-r1 —
Wolfi rolling etcd-3.6 +1 3.6.4-r1 —
Wolfi rolling extism 1.6.3-r1 —
Wolfi rolling falco-exporter 0.8.7-r9 —
Wolfi rolling falcoctl 0.11.2-r4 —
Wolfi rolling falcosidekick 2.31.1-r12 —
Wolfi rolling fixuid 0.6.0-r3 —
Wolfi rolling fluent-bit-plugin-loki 3.5.3-r1 —
Wolfi rolling flux 2.6.4-r3 —
Wolfi rolling flux-helm-controller +1 1.3.0-r6 —
Wolfi rolling flux-image-automation-controller +2 0.41.2-r4 —
Wolfi rolling flux-image-reflector-controller +1 0.35.2-r4 —
Wolfi rolling flux-kustomize-controller +1 1.6.1-r2 —
Wolfi rolling fluxcd-kustomize-mutating-webhook +1 0.5.0-r2 —
Wolfi rolling flyte 1.15.3-r3 —
Wolfi rolling fq 0.15.1-r2 —
Wolfi rolling fscrypt 0.3.5-r10 —
Wolfi rolling fulcio 1.7.1-r5 —
Wolfi rolling fuse-overlayfs-snapshotter 2.1.6-r3 —
Wolfi rolling gatus +1 5.21.0-r2 —
Wolfi rolling gh +1 2.76.2-r1 —
Wolfi rolling ghaudit 0.4.0-r14 —
Wolfi rolling git-credential-oauth 0.15.1-r4 —
Wolfi rolling gitea +1 1.24.4-r1 —
Wolfi rolling gitlab-cng-18.2 18.2.1-r2 —
Wolfi rolling gitness 3.2.0-r4 —
Wolfi rolling gke-gcloud-auth-plugin 0.1.0-r9 —
Wolfi rolling glab 1.65.0-r1 —
Wolfi rolling glow 2.1.1-r4 —
Wolfi rolling go-1.20 +1 No fix yet —
Wolfi rolling go-md2man +1 2.0.7-r3 —
Wolfi rolling gobump 0.9.1-r2 —
Wolfi rolling gofumpt 0.8.0-r4 —
Wolfi rolling golangci-lint 2.3.1-r1 —
Wolfi rolling gomplate 4.3.3-r2 —
Wolfi rolling gops 0.3.28-r20 —
Wolfi rolling gosu 1.17-r15 —
Wolfi rolling gotestsum 1.12.3-r2 —
Wolfi rolling grafana-agent-operator 0.44.3-r3 —
Wolfi rolling grafana-rollout-operator 0.28.0-r2 —
Wolfi rolling grpc-health-probe +1 0.4.39-r3 —
Wolfi rolling grpcurl 1.9.3-r7 —
Wolfi rolling guac +4 1.0.0-r3 —
Wolfi rolling harbor-cli 0.0.8-r2 —
Wolfi rolling harbor-registry 3.0.0-r5 —
Wolfi rolling harbor-scanner-trivy 0.33.2-r1 —
Wolfi rolling hcloud 1.51.0-r4 —
Wolfi rolling hello-world-golang 1.3-r13 —
Wolfi rolling helm 3.18.4-r2 —
Wolfi rolling helm-3 3.19.2-r1 —
Wolfi rolling helm-4 4.0.1-r1 —
Wolfi rolling helm-docs 1.14.2-r12 —
Wolfi rolling helm-mapkubeapis 0.6.1-r1 —
Wolfi rolling helm-operator +1 1.41.1-r2 —
Wolfi rolling helm-push 0.10.4-r32 —
Wolfi rolling helm-set-status 0.3.0-r1 —
Wolfi rolling http-echo 1.0.0-r17 —
Wolfi rolling hubble +1 1.18.0-r0 —
Wolfi rolling hugo-extended 0.148.2-r1 —
Wolfi rolling hydra 2.3.0-r11 —
Wolfi rolling incert 0.5.0-r5 —
Wolfi rolling influx 2.7.5-r10 —
Wolfi rolling ini-file 1.4.8-r3 —
Wolfi rolling ip-masq-agent 2.12.0-r11 —
Wolfi rolling ipfs-cluster +2 1.1.4-r5 —
Wolfi rolling jaeger-operator +1 1.65.0-r8 —
Wolfi rolling jitsucom-bulker +10 2.10.0-r4 —
Wolfi rolling k3d +2 5.8.3-r15 —
Wolfi rolling k3s +2 1.33.3.1-r1 —
Wolfi rolling k3s-1.32 +2 1.32.7.1-r2 —
Wolfi rolling k6 +1 1.1.0-r2 —
Wolfi rolling k8s-device-plugin +3 0.17.3-r1 —
Wolfi rolling k8s_gateway +1 1.5.2-r1 —
Wolfi rolling k8sgpt 0.4.23-r0 —
Wolfi rolling k8ssandra-client +1 0.8.2-r0 —
Wolfi rolling k9s 0.50.9-r4 —
Wolfi rolling kaf 0.2.13-r4 —
Wolfi rolling kafka_exporter 1.9.0-r38 —
Wolfi rolling kaniko +3 1.25.1-r2 —
Wolfi rolling kapp-controller +1 0.58.0-r3 —
Wolfi rolling karma 0.121-r5 —
Wolfi rolling kbld 0.46.0-r3 —
Wolfi rolling kiali 2.13.0-r1 —
Wolfi rolling kind 0.29.0-r3 —
Wolfi rolling kine 0.13.18-r1 —
Wolfi rolling kots +2 1.125.2-r1 —
Wolfi rolling kpt 1.0.0_beta55-r10 —
Wolfi rolling kratos +1 2.8.4-r2 —
Wolfi rolling ksops +1 4.3.3-r13 —
Wolfi rolling kube-bench +1 0.11.2-r1 —
Wolfi rolling kube-fluentd-operator +3 1.18.2-r47 —
Wolfi rolling kube-logging-operator +4 6.0.2-r1 —
Wolfi rolling kube-metrics-adapter 0.2.4-r7 —
Wolfi rolling kube-rbac-proxy 0.19.1-r3 —
Wolfi rolling kube-state-metrics +1 2.16.0-r4 —
Wolfi rolling kubebuilder 4.7.1-r1 —
Wolfi rolling kubecolor 0.5.1-r4 —
Wolfi rolling kubectl-1.29 +2 1.29.15-r12 —
Wolfi rolling kubectl-1.30 +2 1.30.14-r3 —
Wolfi rolling kubectl-1.31 +1 1.31.11-r3 —
Wolfi rolling kubectl-1.32 +1 1.32.7-r3 —
Wolfi rolling kubectl-1.33 +1 1.33.3-r2 —
Wolfi rolling kubeflow +12 1.10.0-r6 —
Wolfi rolling kubeflow-katib +17 0.18.0-r7 —
Wolfi rolling kubelet-csr-approver +1 1.2.10-r2 —
Wolfi rolling kubernetes-csi-driver-hostpath 1.17.0-r3 —
Wolfi rolling kubernetes-csi-driver-nfs +1 4.11.0-r5 —
Wolfi rolling kubernetes-csi-external-provisioner 5.3.0-r3 —
Wolfi rolling kubernetes-dashboard 7.13.0-r4 —
Wolfi rolling kubernetes-dashboard-api +1 1.13.0-r4 —
Wolfi rolling kubernetes-dashboard-auth +1 1.3.0-r4 —
Wolfi rolling kubernetes-dashboard-metrics-scraper +1 1.2.2-r11 —
Wolfi rolling kubernetes-dashboard-web +1 1.7.0-r4 —
Wolfi rolling kubernetes-release +1 0.18.0-r4 —
Wolfi rolling kubernetes-replicator 2.12.0-r2 —
Wolfi rolling kubescape 3.0.37-r1 —
Wolfi rolling kubescape-operator 0.2.98-r1 —
Wolfi rolling kubevela +3 1.10.3-r9 —
Wolfi rolling kubewatch 2.11.0-r3 —
Wolfi rolling kubo +1 0.36.0-r2 —
Wolfi rolling kyverno-policy-reporter +1 3.3.2-r1 —
Wolfi rolling lazygit 0.54.1-r1 —
Wolfi rolling licenseclassifier 2.0.0-r4 —
Wolfi rolling local-static-provisioner +3 2.8.0-r3 —
Wolfi rolling logstash-8-with-output-opensearch 8.19.0-r3 —
Wolfi rolling malcontent 1.15.0-r1 —
Wolfi rolling mc +1 0.20250721.052808-r1 —
Wolfi rolling memcached-exporter +1 0.15.3-r3 —
Wolfi rolling metallb +8 0.15.2-r3 —
Wolfi rolling metrics-server +2 0.8.0-r3 —
Wolfi rolling migrate +1 4.18.3-r3 —
Wolfi rolling minio +1 0.20250723.155402-r1 —
Wolfi rolling minio-operator +3 7.1.1-r3 —
Wolfi rolling mkcert 1.4.4-r16 —
Wolfi rolling mods 1.8.1-r2 —
Wolfi rolling mongo-tools 100.12.2-r3 —
Wolfi rolling nerdctl 2.1.3-r3 —
Wolfi rolling neuvector-dbgen +1 0_git20240423-r7 —
Wolfi rolling newrelic-fluent-bit-output-compat 2.4.0-r5 —
Wolfi rolling newrelic-infra-operator 0.22.4-r1 —
Wolfi rolling newrelic-nri-kube-events 2.15.0-r0 —
Wolfi rolling nfs-subdir-external-provisioner 4.0.18-r24 —
Wolfi rolling nginx-prometheus-exporter +1 1.4.2-r7 —
Wolfi rolling nova +1 3.11.7-r1 —
Wolfi rolling nri-cassandra +2 2.14.6-r1 —
Wolfi rolling nri-discovery-kubernetes +1 1.13.0-r1 —
Wolfi rolling nri-kafka +2 3.13.2-r1 —
Wolfi rolling nri-memcached +2 2.7.1-r2 —
Wolfi rolling nri-mssql +1 2.20.1-r0 —
Wolfi rolling nri-mysql +1 1.16.1-r2 —
Wolfi rolling nri-nagios +1 2.11.1-r2 —
Wolfi rolling nri-postgresql +1 2.20.0-r1 —
Wolfi rolling nri-rabbitmq +1 2.15.1-r2 —
Wolfi rolling nri-redis +1 1.12.2-r2 —
Wolfi rolling nuclei 3.4.7-r2 —
Wolfi rolling nvidia-container-toolkit +8 1.17.8-r4 —
Wolfi rolling op-geth +6 1.101511.1-r1 —
Wolfi rolling opa +1 1.7.1-r1 —
Wolfi rolling openbao-k8s +1 1.4.0-r39 —
Wolfi rolling openfga +2 1.9.2-r2 —
Wolfi rolling opensearch-k8s-operator +1 2.8.0-r2 —
Wolfi rolling opentelemetry-collector +4 0.131.0-r2 —
Wolfi rolling opentofu-1.9 1.9.3-r1 —
Wolfi rolling otel-cli 0.4.5-r6 —
Wolfi rolling overmind 2.5.1-r11 —
Wolfi rolling paranoia +2 0.4.0-r3 —
Wolfi rolling pdfcpu 0.11.0-r3 —
Wolfi rolling petname 2.11-r16 —
Wolfi rolling pg_user 1.1.1-r1 —
Wolfi rolling pgpool2_exporter 1.2.2-r5 —
Wolfi rolling podcli +2 6.9.1-r2 —
Wolfi rolling podman +1 5.5.2-r2 —
Wolfi rolling polaris 10.1.0-r1 —
Wolfi rolling policy-controller +1 0.13.0-r2 —
Wolfi rolling pombump 0.0.14-r3 —
Wolfi rolling portieris +1 0.13.29-r2 —
Wolfi rolling postgres-operator 1.14.0-r10 —
Wolfi rolling postgres-operator-compat 1.14.0-r12 —
Wolfi rolling promxy 0.0.93-r3 —
Wolfi rolling pulumi-language-java 1.16.1-r1 —
Wolfi rolling rabbitmq-messaging-topology-operator +2 1.17.3-r1 —
Wolfi rolling rancher-fleet +6 0.13.0-r1 —
Wolfi rolling rancher-helm-3 3.18.3-r2 —
Wolfi rolling rancher-loglevel 0.1.6-r7 —
Wolfi rolling rancher-system-agent 0.3.13-r1 —
Wolfi rolling rancher-telemetry 0.6.2-r4 —
Wolfi rolling ratify +10 1.4.0-r3 —
Wolfi rolling rclone +1 1.70.3-r2 —
Wolfi rolling redka 0.6.0-r2 —
Wolfi rolling rekor +3 1.4.0-r1 —
Wolfi rolling render-template 1.0.8-r3 —
Wolfi rolling restic +1 0.18.0-r5 —
Wolfi rolling rke2-cloud-provider +1 1.33.1-r2 —
Wolfi rolling rook +1 1.17.7-r1 —
Wolfi rolling runc +3 1.3.0-r3 —
Wolfi rolling s5cmd 2.3.0-r6 —
Wolfi rolling sbom-convert 0.0.7-r4 —
Wolfi rolling sbom-scorecard 0.0.7-r23 —
Wolfi rolling seaweedfs +2 3.96-r1 —
Wolfi rolling secrets-store-csi-driver-provider-gcp 1.9.0-r2 —
Wolfi rolling sftpgo-plugin-eventstore +1 1.0.20-r6 —
Wolfi rolling sftpgo-plugin-kms 1.0.15-r8 —
Wolfi rolling sigstore-scaffolding +13 0.7.24-r2 —
Wolfi rolling skaffold 2.16.1-r2 —
Wolfi rolling skopeo 1.20.0-r1 —
Wolfi rolling smarter-device-manager 1.20.11-r20 —
Wolfi rolling snyk-cli 1.1298.2-r1 —
Wolfi rolling spegel +1 0.3.0-r4 —
Wolfi rolling spicedb +1 1.45.1-r2 —
Wolfi rolling spiffe-helper +1 0.10.1-r1 —
Wolfi rolling spire-agent +2 1.12.4-r4 —
Wolfi rolling splunk-otel-collector +2 0.131.1-r1 —
Wolfi rolling sql_exporter 0.18.1-r2 —
Wolfi rolling src 6.6.0-r1 —
Wolfi rolling steampipe 2.1.0-r3 —
Wolfi rolling step 0.28.7-r3 —
Wolfi rolling step-ca 0.28.4-r2 —
Wolfi rolling step-issuer +1 0.9.9-r2 —
Wolfi rolling supercronic 0.2.34-r2 —
Wolfi rolling swagger 0.32.3-r3 —
Wolfi rolling temporal +1 1.4.1-r2 —
Wolfi rolling terraform +2 1.5.7-r31 —
Wolfi rolling terraform-provider-azapi 2.5.0-r2 —
Wolfi rolling terraform-provider-kubernetes 2.38.0-r2 —
Wolfi rolling terraform-provider-sendgrid 1.0.1-r6 —
Wolfi rolling terragrunt +5 0.84.1-r1 —
Wolfi rolling tflint +1 0.58.1-r2 —
Wolfi rolling thanos +1 0.39.2-r1 —
Wolfi rolling timescaledb-parallel-copy 0.10.0-r1 —
Wolfi rolling tofu-controller +3 0.16.0_rc5-r4 —
Wolfi rolling trillian +2 1.7.2-r4 —
Wolfi rolling trino +58 476-r4 —
Wolfi rolling trivy 0.65.0-r1 —
Wolfi rolling trivy-operator 0.28.0-r0 —
Wolfi rolling trufflehog 3.90.3-r1 —
Wolfi rolling trust-manager 0.18.0-r3 —
Wolfi rolling undock 0.10.0-r3 —
Wolfi rolling vault-env +1 1.22.0-r2 —
Wolfi rolling velero +2 1.16.2-r1 —
Wolfi rolling verticadb-operator +1 25.3.0.0-r2 —
Wolfi rolling victoriametrics-cluster +10 1.123.0-r1 —
Wolfi rolling victoriametrics-operator +1 0.61.2-r1 —
Wolfi rolling volume-modifier-for-k8s 0.7.0-r2 —
Wolfi rolling vt-cli 1.1.1-r2 —
Wolfi rolling wait-for-port 1.0.9-r4 —
Wolfi rolling weaviate 1.32.2-r1 —
Wolfi rolling witness 0.9.2-r4 —
Wolfi rolling wolfictl 0.38.9-r1 —
Wolfi rolling xeol +1 0.10.8-r10 —
Wolfi rolling yace 0.62.1-r7 —
Wolfi rolling yam 0.2.27-r1 —
Wolfi rolling yq 4.47.1-r1 —
Wolfi rolling ytt 0.52.0-r3 —
Wolfi rolling yunikorn-k8shim +1 1.7.0-r2 —
Wolfi rolling yunikorn-web +1 1.7.0-r1 —
Wolfi rolling zot 2.1.7-r1 —

Affected packages

EcosystemPackageAffectedFixedRecord
Go stdlib < 1.23.12 · >= 1.24.0, < 1.24.6 1.23.12, 1.24.6 GO-2025-3849

Advisories 47

References