Skip to content
OpenAdvisories
Medium · 5.4 CVE-2025-47910 BIT-golang-2025-47910EUVD-2025-30469GHSA-8pjc-487g-w6p2GO-2025-3955

CrossOriginProtection insecure bypass patterns not limited to exact matches in net/http

Published Sep 22, 2025 · Updated Sep 24, 2025 · Assigned by Go

Vendor: Go standard library Product: net/http Package: aactl Package: amazon-cloudwatch-agent-operator Package: amazon-cloudwatch-agent-operator-compat Package: argo-events Package: aws-application-networking-k8s Package: aws-application-networking-k8s-compat Package: aws-eks-pod-identity-agent Package: aws-eks-pod-identity-agent-compat Package: aws-otel-collector Package: aws-otel-collector-compat Package: aws-otel-collector-healthcheck Package: aws-privateca-issuer Package: aws-privateca-issuer-compat Package: azure-service-operator Package: azure-service-operator-compat Package: bom Package: buildctl Package: buildkitd Package: caddy Package: caddy-man Package: caddy-src Package: cerbos Package: cerbos-compat Package: cerbosctl Package: cerbosctl-compat Package: chart-testing Package: chartmuseum Package: cilium-cli Package: cis-operator-1.4 Package: clickhouse-operator Package: clickhouse-operator-compat Package: clickhouse-operator-metrics-exporter Package: clickhouse-operator-metrics-exporter-compat Package: cloud-provider-gcp-cloud-controller-manager Package: cloud-provider-gcp-cloud-controller-manager-compat Package: cloud-provider-vsphere Package: cloud-sql-proxy-2.16 Package: cloud-sql-proxy-2.16-compat Package: cluster-api-azure-controller Package: cluster-api-azure-controller-compat Package: cluster-api-helm-controller Package: cluster-api-helm-controller-compat Package: cluster-api-provider-vsphere Package: cluster-api-provider-vsphere-compat Package: cni-plugins Package: cni-plugins-aws-k8s-compat Package: cni-plugins-bandwidth Package: cni-plugins-bandwidth-compat Package: cni-plugins-bridge Package: cni-plugins-bridge-compat Package: cni-plugins-dhcp Package: cni-plugins-dhcp-compat Package: cni-plugins-dummy Package: cni-plugins-dummy-compat Package: cni-plugins-firewall Package: cni-plugins-firewall-compat Package: cni-plugins-host-device Package: cni-plugins-host-device-compat Package: cni-plugins-host-local Package: cni-plugins-host-local-compat Package: cni-plugins-ipam Package: cni-plugins-ipvlan Package: cni-plugins-ipvlan-compat Package: cni-plugins-loopback Package: cni-plugins-loopback-compat Package: cni-plugins-macvlan Package: cni-plugins-macvlan-compat Package: cni-plugins-main Package: cni-plugins-meta Package: cni-plugins-portmap Package: cni-plugins-portmap-compat Package: cni-plugins-ptp Package: cni-plugins-ptp-compat Package: cni-plugins-sbr Package: cni-plugins-sbr-compat Package: cni-plugins-static Package: cni-plugins-static-compat Package: cni-plugins-tap Package: cni-plugins-tap-compat Package: cni-plugins-tuning Package: cni-plugins-tuning-compat Package: cni-plugins-vlan Package: cni-plugins-vlan-compat Package: cni-plugins-vrf Package: cni-plugins-vrf-compat Package: conftest Package: containerd-1 Package: containerd-2 Package: containerd-service-1 Package: containerd-service-2 Package: containerd-shim-runc-v2-1 Package: containerd-shim-runc-v2-2 Package: containerd-stress-1 Package: containerd-stress-2 Package: controller-gen Package: ctr-1 Package: ctr-2 Package: delve Package: dex Package: dex-iamguarded-compat Package: dgraph Package: dive Package: docker-cli Package: docker-cli-buildx Package: docker-cli-doc Package: docker-credential-gcr Package: docker-machine-driver-harvester Package: eksctl Package: emissary Package: emissary-apiext Package: emissary-oci-entrypoint Package: envconsul Package: falcoctl Package: flux Package: fulcio Package: fzf Package: gcsfuse Package: glow Package: go Package: gobump Package: gobuster Package: golang-1.10 Package: golang-1.13 Package: golang-1.14 Package: golang-1.16 Package: golang-1.17 Package: golang-1.18 Package: golang-1.20 Package: golang-1.21 Package: golang-1.22 Package: golang-1.23 Package: golang-1.24 Package: golang-1.25 Package: golang-1.25 Package: golang-1.6 Package: golang-1.8 Package: golang-1.9 Package: gptscript Package: grafana-alloy Package: grafana-rollout-operator Package: guac Package: guaccsub Package: guacgql Package: guacingest Package: guacone Package: harbor-cli Package: harbor-registry Package: headlamp Package: headlamp-compat Package: helm-operator Package: helm-operator-compat Package: helm-push Package: helm-set-status Package: hubble Package: hubble-compat Package: ini-file Package: ip-masq-agent Package: ipfs-cluster Package: ipfs-cluster-compat Package: ipfs-cluster-oci-entrypoint Package: k3d Package: k3d-proxy Package: k3d-tools Package: k3s Package: k3s-1.32 Package: k3s-multicall Package: k3s-multicall-1.32 Package: k3s-static Package: k3s-static-1.32 Package: k8s_gateway Package: k8s_gateway-compat Package: k8sgpt Package: kapp Package: kapp-controller Package: kapp-controller-compat Package: katib-controller Package: katib-controller-compat Package: katib-db-manager Package: katib-db-manager-compat Package: katib-earlystopping Package: katib-file-metricscollector Package: katib-file-metricscollector-compat Package: katib-suggestion-goptuna Package: katib-suggestion-goptuna-compat Package: katib-suggestion-hyperband Package: katib-suggestion-hyperopt Package: katib-suggestion-nas-darts Package: katib-suggestion-nas-enas Package: katib-suggestion-optuna-enas Package: katib-suggestion-pbt-enas Package: katib-suggestion-skopt-enas Package: katib-tfevent-metricscollector Package: kind Package: ko Package: kor Package: kpt Package: kube-bench Package: kube-bench-configs Package: kube-logging-operator Package: kube-logging-operator-compat Package: kube-logging-operator-config-reloader Package: kube-logging-operator-config-reloader-compat Package: kube-logging-operator-fluentd-outputs Package: kubecolor Package: kubeflow-katib Package: kuberlr Package: kubernetes-csi-driver-hostpath Package: kubernetes-csi-driver-nfs Package: kubernetes-csi-driver-nfs-compat Package: kubernetes-csi-external-health-monitor Package: kubernetes-csi-external-health-monitor-compat Package: kubernetes-dashboard Package: kubernetes-dashboard-api Package: kubernetes-dashboard-api-compat Package: kubernetes-dashboard-auth Package: kubernetes-dashboard-auth-compat Package: kubernetes-dashboard-web Package: kubernetes-dashboard-web-compat Package: kyverno-notation-aws Package: kyverno-notation-aws-compat Package: lazydocker Package: libnvidia-container Package: migrate Package: migrate-compat Package: mockgen Package: mongo-tools Package: nats-server-config-reloader Package: nats-server-config-reloader-compat Package: nats-server-config-reloader-oci-entrypoint Package: neuvector-sigstore-interface Package: nginx-prometheus-exporter Package: nginx-prometheus-exporter-iamguarded-compat Package: nodetaint Package: nova Package: nova-compat Package: nri-apache Package: nri-apache-compat Package: nri-consul Package: nri-consul-compat Package: nri-f5 Package: nri-f5-compat Package: nri-haproxy Package: nri-haproxy-compat Package: nri-memcached Package: nri-memcached-compat Package: nri-mysql Package: nri-mysql-compat Package: nri-nginx Package: nri-nginx-compat Package: nri-rabbitmq Package: nri-rabbitmq-compat Package: nri-redis Package: nri-redis-compat Package: nuclei Package: oauth2-proxy Package: oauth2-proxy-iamguarded-compat Package: opa Package: opentofu-1.9 Package: pluto Package: pluto-compat Package: polaris Package: portieris Package: portieris-compat Package: prometheus-3.2 Package: prometheus-admission-webhook Package: prometheus-config-reloader Package: prometheus-operator Package: prometheus-operator-iamguarded-compat Package: py3.10-ambassador Package: py3.11-ambassador Package: py3.12-ambassador Package: py3.13-ambassador Package: rabbitmq-cluster-operator Package: rabbitmq-cluster-operator-compat Package: rabbitmq-cluster-operator-iamguarded-compat Package: rabbitmq-default-user-credential-updater Package: rabbitmq-default-user-credential-updater-compat Package: rabbitmq-messaging-topology-operator Package: rabbitmq-messaging-topology-operator-compat Package: rabbitmq-messaging-topology-operator-iamguarded-compat Package: rancher-system-agent Package: rancher-system-upgrade-controller Package: ratify Package: ratify-compat Package: ratify-crds Package: ratify-licensechecker Package: ratify-licensechecker-compat Package: ratify-sbom Package: ratify-sbom-compat Package: ratify-schemavalidator Package: ratify-schemavalidator-compat Package: ratify-vulnerabilityreport Package: ratify-vulnerabilityreport-compat Package: rclone Package: rclone-compat Package: regclient Package: regclient-regbot Package: regclient-regbot-compat Package: regclient-regctl Package: regclient-regctl-compat Package: regclient-regsync Package: regclient-regsync-compat Package: render-template Package: spark-operator Package: spark-operator-oci-entrypoint Package: spire-controller-manager Package: spire-controller-manager-compat Package: src Package: stdlib Package: steampipe Package: step-kms-plugin Package: swagger Package: tekton-chains Package: terraform Package: terraform-compat Package: terraform-local-provider-config Package: terraform-mcp-server Package: terraform-provider-azapi Package: tflint Package: tflint-compat Package: thanos-operator Package: thanos-operator-compat Package: timescaledb-tune Package: tkn Package: trivy Package: undock Package: wait-for-port Package: wal-g Package: wal-g-pg Package: wgcf Package: wire-go Package: witness Package: yunikorn-k8shim Package: yunikorn-k8shim-compat Package: zot Ecosystem: Alpine Ecosystem: Debian Ecosystem: Go Ecosystem: Ubuntu Ecosystem: Wolfi

Description

When using http.CrossOriginProtection, the AddInsecureBypassPattern method can unexpectedly bypass more requests than intended. CrossOriginProtection then skips validation, but forwards the original request path, which may be served by a different handler without the intended security protections.

Affected products

VendorProductAffectedFixed
Go standard library net/http 1.25.0 – < 1.25.1 1.25.1

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 14 golang-1.25 1.25.1-1 —

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 26.04 LTS golang-1.23 +1 No fix yet —
Ubuntu 25.10 golang-1.23 +2 No fix yet —
Ubuntu 24.04 LTS golang-1.21 +4 No fix yet —
Ubuntu 22.04 LTS golang-1.17 +7 No fix yet —
Ubuntu 20.04 LTS golang-1.13 +5 No fix yet —
Show 7 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu 18.04 LTS golang-1.8 +2 No fix yet —
Ubuntu 16.04 LTS golang-1.6 +1 No fix yet —
Ubuntu 14.04 LTS golang-1.10 No fix yet —
Ubuntu Pro 22.04 LTS golang-1.13 No fix yet —
Ubuntu Pro 20.04 LTS golang-1.16 No fix yet —
Ubuntu Pro 18.04 LTS golang-1.13 +2 No fix yet —
Ubuntu Pro 16.04 LTS golang-1.13 +1 No fix yet —

Red Hat

Security tracker ↗
ReleasePackageFixed inAdvisory
Red Hat Hardened Images 1 golang1.25 +6 1.25.9-1.hum1 RHSA-2026:7385
Red Hat Hardened Images 1 golang1.26 +6 1.26.2-1.hum1 RHSA-2026:7291

SUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
SLES 15 SP7 aws-iam-authenticator 0.7.18-150000.1.17.1 SUSE-SU-2026:2643-1
SLES 15 SP7 go1.25 1.25.1-150000.1.8.1 SUSE-SU-2025:03200-1
SLES 15 SP7 go1.25-openssl 1.25.1-150600.13.6.1 SUSE-SU-2026:0298-1, SUSE-SU-2025:03525-1
SLES 15 SP6 aws-iam-authenticator 0.7.18-150000.1.17.1 SUSE-SU-2026:2643-1
SLES 15 SP6 go1.25 1.25.1-150000.1.8.1 SUSE-SU-2025:03200-1
SLES 15 SP6 go1.25-openssl 1.25.1-150600.13.6.1 SUSE-SU-2026:0298-1, SUSE-SU-2025:03525-1
SLES 15 SP6 govulncheck-vulndb 0.0.20251023T162509-150000.1.110.1 SUSE-SU-2025:3799-1
SLES 15 SP5 aws-iam-authenticator 0.7.18-150000.1.17.1 SUSE-SU-2026:2643-1
SLES 15 SP5 go1.25 1.25.1-150000.1.8.1 SUSE-SU-2025:03200-1
SLES 15 SP5 go1.25-openssl 1.25.1-150000.1.6.1 SUSE-SU-2026:0297-1, SUSE-SU-2025:03524-1
SLES 15 SP4 aws-iam-authenticator 0.7.18-150000.1.17.1 SUSE-SU-2026:2643-1
SLES 15 SP4 go1.25 1.25.1-150000.1.8.1 SUSE-SU-2025:03200-1
SLES 15 SP4 go1.25-openssl 1.25.1-150000.1.6.1 SUSE-SU-2026:0297-1, SUSE-SU-2025:03524-1
SLES 15 SP3 go1.25 1.25.1-150000.1.8.1 SUSE-SU-2025:03200-1
SLES 15 SP3 go1.25-openssl 1.25.1-150000.1.6.1 SUSE-SU-2025:03524-1
Show 10 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES for SAP 16.0 go1.25 1.25.5-160000.1.1 SUSE-SU-2025:21192-1
SLES for SAP 15 SP6 go1.25-openssl 1.25.6-150600.13.9.1 SUSE-SU-2026:0298-1
SLES for SAP 15 SP5 go1.25 1.25.1-150000.1.8.1 SUSE-SU-2025:03200-1
SLES for SAP 15 SP5 go1.25-openssl 1.25.1-150000.1.6.1 SUSE-SU-2026:0297-1, SUSE-SU-2025:03524-1
SLES for SAP 15 SP4 go1.25 1.25.1-150000.1.8.1 SUSE-SU-2025:03200-1
SLES for SAP 15 SP4 go1.25-openssl 1.25.1-150000.1.6.1 SUSE-SU-2026:0297-1, SUSE-SU-2025:03524-1
SLES for SAP 15 SP3 go1.25 1.25.1-150000.1.8.1 SUSE-SU-2025:03200-1
SLES for SAP 15 SP3 go1.25-openssl 1.25.1-150000.1.6.1 SUSE-SU-2025:03524-1
SLES 16.0 go1.25 1.25.5-160000.1.1 SUSE-SU-2025:21192-1
SLE HPC 15 SP5 go1.25 1.25.1-150000.1.8.1 SUSE-SU-2025:03200-1
SLE HPC 15 SP5 go1.25-openssl 1.25.1-150000.1.6.1 SUSE-SU-2026:0297-1, SUSE-SU-2025:03524-1
SLE HPC 15 SP4 go1.25 1.25.1-150000.1.8.1 SUSE-SU-2025:03200-1
SLE HPC 15 SP4 go1.25-openssl 1.25.1-150000.1.6.1 SUSE-SU-2026:0297-1, SUSE-SU-2025:03524-1
SLE HPC 15 SP3 go1.25 1.25.1-150000.1.8.1 SUSE-SU-2025:03200-1
SLE HPC 15 SP3 go1.25-openssl 1.25.1-150000.1.6.1 SUSE-SU-2025:03524-1
SUSE Enterprise Storage 7.1 go1.25 1.25.1-150000.1.8.1 SUSE-SU-2025:03200-1
SUSE Enterprise Storage 7.1 go1.25-openssl 1.25.1-150000.1.6.1 SUSE-SU-2025:03524-1

openSUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed go1.25 1.25.1-1.1 openSUSE-SU-2025:15525-1
openSUSE Tumbleweed govulncheck-vulndb 0.0.20250922T204835-1.1 openSUSE-SU-2025:15574-1
openSUSE Leap 16.0 go1.25 1.25.5-160000.1.1 openSUSE-SU-2025:20157-1
openSUSE Leap 16.0 govulncheck-vulndb 0.0.20260723T184607-160000.1.1 openSUSE-SU-2026:21483-1
openSUSE Leap 15.6 go1.25 1.25.1-150000.1.8.1 SUSE-SU-2025:03200-1
openSUSE Leap 15.6 go1.25-openssl 1.25.1-150600.13.6.1 SUSE-SU-2026:0298-1, SUSE-SU-2025:03525-1
openSUSE Leap 15.6 govulncheck-vulndb 0.0.20251023T162509-150000.1.110.1 SUSE-SU-2025:3799-1

Alpine

Security tracker ↗
ReleasePackageFixed inAdvisory
Alpine v3.24 go 1.25.1-r0 —
Alpine v3.23 go 1.25.1-r0 —

Wolfi

ReleasePackageFixed inAdvisory
Wolfi rolling aactl 0.4.12-r36 —
Wolfi rolling amazon-cloudwatch-agent-operator +1 3.2.0-r0 —
Wolfi rolling argo-events 1.9.7-r4 —
Wolfi rolling aws-application-networking-k8s +1 1.1.4-r2 —
Wolfi rolling aws-eks-pod-identity-agent +1 0.1.33-r1 —
Wolfi rolling aws-otel-collector +2 0.45.0-r1 —
Wolfi rolling aws-privateca-issuer +1 1.7.0-r1 —
Wolfi rolling azure-service-operator +1 2.15.0-r1 —
Wolfi rolling bom 0.6.0-r25 —
Wolfi rolling buildctl +1 0.24.0-r1 —
Wolfi rolling caddy +2 2.10.2-r1 —
Wolfi rolling cerbos +3 0.46.0-r3 —
Wolfi rolling chart-testing 3.13.0-r8 —
Wolfi rolling chartmuseum 0.16.3-r7 —
Wolfi rolling cilium-cli 0.18.7-r1 —
Wolfi rolling cis-operator-1.4 1.4.1-r5 —
Wolfi rolling clickhouse-operator +3 0.25.3-r2 —
Wolfi rolling cloud-provider-gcp-cloud-controller-manager +1 34.0.0-r0 —
Wolfi rolling cloud-provider-vsphere 1.34.0-r1 —
Wolfi rolling cloud-sql-proxy-2.16 +1 2.16.0-r9 —
Wolfi rolling cluster-api-azure-controller +1 1.21.0-r1 —
Wolfi rolling cluster-api-helm-controller +1 0.3.2-r6 —
Wolfi rolling cluster-api-provider-vsphere +1 1.14.0-r1 —
Wolfi rolling conftest 0.62.0-r6 —
Wolfi rolling controller-gen 0.19.0-r1 —
Wolfi rolling ctr-1 +4 1.7.28-r3 —
Wolfi rolling ctr-2 +4 2.1.4-r3 —
Wolfi rolling delve 1.25.2-r1 —
Wolfi rolling dex +1 2.44.0-r1 —
Wolfi rolling dgraph 24.1.4-r1 —
Wolfi rolling dive 0.13.1-r8 —
Wolfi rolling docker-cli +1 28.4.0-r1 —
Wolfi rolling docker-cli-buildx 0.28.0-r1 —
Wolfi rolling docker-credential-gcr 2.1.30-r4 —
Wolfi rolling docker-machine-driver-harvester 1.0.3-r4 —
Wolfi rolling eksctl 0.214.0-r1 —
Wolfi rolling emissary +6 3.10.0-r10 —
Wolfi rolling envconsul 0.13.4-r1 —
Wolfi rolling falcoctl 0.11.4-r0 —
Wolfi rolling flux 2.6.4-r5 —
Wolfi rolling fulcio 1.7.1-r7 —
Wolfi rolling fzf 0.65.2-r1 —
Wolfi rolling gcsfuse 2.12.2-r5 —
Wolfi rolling glow 2.1.1-r6 —
Wolfi rolling gobump 0.9.3-r1 —
Wolfi rolling gobuster 3.8.2-r1 —
Wolfi rolling gptscript 0.9.5-r16 —
Wolfi rolling grafana-alloy 1.10.2-r4 —
Wolfi rolling grafana-rollout-operator 0.29.0-r1 —
Wolfi rolling guac +4 1.0.1-r0 —
Wolfi rolling harbor-cli 0.0.11-r1 —
Wolfi rolling harbor-registry 3.0.0-r10 —
Wolfi rolling headlamp +1 0.35.0-r1 —
Wolfi rolling helm-operator +1 1.41.1-r4 —
Wolfi rolling helm-push 0.10.4-r34 —
Wolfi rolling helm-set-status 0.3.0-r4 —
Wolfi rolling hubble +1 1.18.0-r2 —
Wolfi rolling ini-file 1.4.9-r1 —
Wolfi rolling ip-masq-agent 2.12.0-r13 —
Wolfi rolling ipfs-cluster +2 1.1.4-r7 —
Wolfi rolling k3d +2 5.8.3-r17 —
Wolfi rolling k3s +2 1.34.1.1-r0 —
Wolfi rolling k3s-1.32 +2 1.32.8.1-r1 —
Wolfi rolling k8s_gateway +1 1.6.0-r1 —
Wolfi rolling k8sgpt 0.4.25-r1 —
Wolfi rolling kapp 0.64.2-r4 —
Wolfi rolling kapp-controller +1 0.58.1-r1 —
Wolfi rolling kind 0.30.0-r1 —
Wolfi rolling ko 0.18.0-r6 —
Wolfi rolling kor 0.6.4-r2 —
Wolfi rolling kpt 1.0.0_beta55-r12 —
Wolfi rolling kube-bench +1 0.12.0-r1 —
Wolfi rolling kube-logging-operator +4 6.0.3-r1 —
Wolfi rolling kubecolor 0.5.1-r6 —
Wolfi rolling kubeflow-katib +17 0.18.0-r9 —
Wolfi rolling kuberlr 0.6.1-r3 —
Wolfi rolling kubernetes-csi-driver-hostpath 1.17.0-r5 —
Wolfi rolling kubernetes-csi-driver-nfs +1 4.11.0-r7 —
Wolfi rolling kubernetes-csi-external-health-monitor +1 0.16.0-r0 —
Wolfi rolling kubernetes-dashboard 7.13.0-r6 —
Wolfi rolling kubernetes-dashboard-api +1 1.13.0-r6 —
Wolfi rolling kubernetes-dashboard-auth +1 1.3.0-r6 —
Wolfi rolling kubernetes-dashboard-web +1 1.7.0-r6 —
Wolfi rolling kyverno-notation-aws +1 1.1-r22 —
Wolfi rolling lazydocker 0.24.1-r7 —
Wolfi rolling libnvidia-container 1.17.8-r5 —
Wolfi rolling migrate +1 4.19.0-r1 —
Wolfi rolling mockgen 0.6.0-r1 —
Wolfi rolling mongo-tools 100.13.0-r2 —
Wolfi rolling nats-server-config-reloader +2 0.19.2-r1 —
Wolfi rolling neuvector-sigstore-interface 0_git20250629-r3 —
Wolfi rolling nginx-prometheus-exporter +1 1.5.0-r1 —
Wolfi rolling nodetaint 0.0.4-r37 —
Wolfi rolling nova +1 3.11.8-r2 —
Wolfi rolling nri-apache +1 1.15.2-r1 —
Wolfi rolling nri-consul +1 2.9.3-r1 —
Wolfi rolling nri-f5 +1 2.9.0-r1 —
Wolfi rolling nri-haproxy +1 3.2.2-r1 —
Wolfi rolling nri-memcached +1 2.7.2-r1 —
Wolfi rolling nri-mysql +1 1.17.0-r1 —
Wolfi rolling nri-nginx +1 3.6.2-r1 —
Wolfi rolling nri-rabbitmq +1 2.15.2-r1 —
Wolfi rolling nri-redis +1 1.12.3-r1 —
Wolfi rolling nuclei 3.4.10-r2 —
Wolfi rolling oauth2-proxy +1 7.12.0-r1 —
Wolfi rolling opa +41 1.8.0-r1 —
Wolfi rolling opentofu-1.9 1.9.4-r1 —
Wolfi rolling pluto +1 5.22.5-r3 —
Wolfi rolling polaris 10.1.1-r1 —
Wolfi rolling portieris +1 0.13.30-r2 —
Wolfi rolling prometheus-3.2 3.2.1-r49 —
Wolfi rolling prometheus-operator +3 0.85.0-r2 —
Wolfi rolling rabbitmq-cluster-operator +2 2.16.1-r1 —
Wolfi rolling rabbitmq-default-user-credential-updater +1 1.0.8-r1 —
Wolfi rolling rabbitmq-messaging-topology-operator +2 1.17.4-r1 —
Wolfi rolling rancher-system-agent 0.3.13-r3 —
Wolfi rolling rancher-system-upgrade-controller 0.16.3-r1 —
Wolfi rolling ratify +10 1.4.0-r5 —
Wolfi rolling rclone +1 1.71.1-r0 —
Wolfi rolling regclient +6 0.9.2-r1 —
Wolfi rolling render-template 1.0.9-r1 —
Wolfi rolling spark-operator +1 2.3.0-r3 —
Wolfi rolling spire-controller-manager +1 0.6.3-r1 —
Wolfi rolling src 6.7.1104-r1 —
Wolfi rolling steampipe 2.2.0-r0 —
Wolfi rolling step-kms-plugin 0.15.1-r1 —
Wolfi rolling swagger 0.32.3-r6 —
Wolfi rolling tekton-chains 0.25.1-r6 —
Wolfi rolling terraform +2 1.5.7-r33 —
Wolfi rolling terraform-mcp-server 0.2.3-r2 —
Wolfi rolling terraform-provider-azapi 2.6.1-r1 —
Wolfi rolling tflint +1 0.59.1-r1 —
Wolfi rolling thanos-operator +1 0.3.7-r34 —
Wolfi rolling timescaledb-tune 0.18.1-r1 —
Wolfi rolling tkn 0.42.0-r2 —
Wolfi rolling trivy 0.66.0-r1 —
Wolfi rolling undock 0.10.0-r5 —
Wolfi rolling wait-for-port 1.0.10-r1 —
Wolfi rolling wal-g +1 3.0.7-r13 —
Wolfi rolling wgcf 2.2.29-r1 —
Wolfi rolling wire-go 0.7.0-r1 —
Wolfi rolling witness 0.9.2-r6 —
Wolfi rolling yunikorn-k8shim +1 1.7.0-r4 —
Wolfi rolling zot 2.1.8-r1 —

Affected packages

EcosystemPackageAffectedFixedRecord
Go stdlib >= 1.25.0, < 1.25.1 1.25.1 GO-2025-3955

Advisories 15

References