StackRadar

CVE-2025-10543

Medium

Advisory

Published 2 Dec 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.3
base score, highest
EPSS
0.002
13th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
111
of 17,781 indexed, latest versions
Container images
93
deployed by those charts
Fix available
1 of 1
affected package

Eclipse Paho Go MQTT may incorrectly encode strings if length exceeds 65535 bytes

Carried by container images the latest versions of 111 of 17,781 indexed charts deploy, on 93 images.

Affected packageAffected versionsFixed inImages
github.com/eclipse/paho.mqtt.golanggolangv1.2.0, v1.2.1-0.20200121105743-0d940dd29fd2, v1.3.0, v1.3.1+5 more1.5.193
OSV records
GHSA-32fw-gq77-f2f2
Also known as
GO-2025-4173

Charts affected

111 by stars
ChartLatestAffected imagesRadar Score
wazuhwazuh-helm-eksVerified publisher1.2.101 of 6See more

wazuh wazuh-helm-eks 1.2.10

1 of the 6 container images this version deploys carry CVE-2025-10543.

Container imageDigestPackageFixed in
wazuh/wazuh-manager:4.14.45a065930682d
github.com/eclipse/paho.mqtt.golang@v1.2.1-0.20200121105743-0d940dd29fd2
1.5.1

Open the chart page →

5,484
wazuh-manager-filebeatwazuh-manager-filebeat0.1.0-gamma1 of 1See more

wazuh-manager-filebeat wazuh-manager-filebeat 0.1.0-gamma

1 of the 1 container images this version deploys carry CVE-2025-10543.

Container imageDigestPackageFixed in
iosifache/wazuh-manager-filebeat:latest85df3f04b5da
github.com/eclipse/paho.mqtt.golang@v1.2.1-0.20200121105743-0d940dd29fd2
1.5.1

Open the chart page →

11,119
miniowenerme8.0.101 of 1See more

minio wenerme 8.0.10

1 of the 1 container images this version deploys carry CVE-2025-10543.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2021-02-14T04-01-33Zbd11edda91f3
github.com/eclipse/paho.mqtt.golang@v1.3.0
1.5.1

Open the chart page →

6,915
minio-standalonewenerme1.0.21 of 1See more

minio-standalone wenerme 1.0.2

1 of the 1 container images this version deploys carry CVE-2025-10543.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2022-01-04T07-41-07Z1484c87239ea
github.com/eclipse/paho.mqtt.golang@v1.3.0
1.5.1

Open the chart page →

6,138
wexa-studiowexa-studio1.2.01 of 15See more

wexa-studio wexa-studio 1.2.0

1 of the 15 container images this version deploys carry CVE-2025-10543.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2024-01-16T16-07-38Z4c4a4876193f
github.com/eclipse/paho.mqtt.golang@v1.4.3
1.5.1

Open the chart page →

14,983
oauth2xdVerified publisher1.0.01 of 1See more

oauth2 xd 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-10543.

Container imageDigestPackageFixed in
lishimeng/hufu:v1.2.13d5752dac834
github.com/eclipse/paho.mqtt.golang@v1.4.2
1.5.1

Open the chart page →

2,007
owlxdVerified publisher0.5.12 of 2See more

owl xd 0.5.1

2 of the 2 container images this version deploys carry CVE-2025-10543.

Container imageDigestPackageFixed in
lishimeng/owl-console:v0.11.2c79a67657baf
github.com/eclipse/paho.mqtt.golang@v1.4.3
1.5.1
lishimeng/owl-messager:v0.11.23d00485e64dc
github.com/eclipse/paho.mqtt.golang@v1.4.3
1.5.1

Open the chart page →

3,880
passportxdVerified publisher0.2.162 of 2See more

passport xd 0.2.16

2 of the 2 container images this version deploys carry CVE-2025-10543.

Container imageDigestPackageFixed in
lishimeng/passport:v0.2.163e7d05ded625
github.com/eclipse/paho.mqtt.golang@v1.4.2
1.5.1
lishimeng/passport-profile:v0.2.160970dfe5dc8f
github.com/eclipse/paho.mqtt.golang@v1.4.2
1.5.1

Open the chart page →

3,974
tabbyxdVerified publisher1.0.61 of 2See more

tabby xd 1.0.6

1 of the 2 container images this version deploys carry CVE-2025-10543.

Container imageDigestPackageFixed in
lishimeng/tabby:v1.0.48145c3dc83c8
github.com/eclipse/paho.mqtt.golang@v1.4.2
1.5.1

Open the chart page →

7,673
treexdVerified publisher0.1.101 of 1See more

tree xd 0.1.10

1 of the 1 container images this version deploys carry CVE-2025-10543.

Container imageDigestPackageFixed in
lishimeng/tree:v0.2.89b2f8be6c7d3
github.com/eclipse/paho.mqtt.golang@v1.4.2
1.5.1

Open the chart page →

1,997
zooxdVerified publisher0.4.01 of 1See more

zoo xd 0.4.0

1 of the 1 container images this version deploys carry CVE-2025-10543.

Container imageDigestPackageFixed in
lishimeng/zoo:v0.4.0e0b8d2d8ca28
github.com/eclipse/paho.mqtt.golang@v1.4.3
1.5.1

Open the chart page →

1,955

Container images carrying it

93 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
lishimeng/tabby:v1.0.48145c3dc83c8
github.com/eclipse/paho.mqtt.golang@v1.4.2
1.5.1
1
lishimeng/tree:v0.2.89b2f8be6c7d3
github.com/eclipse/paho.mqtt.golang@v1.4.2
1.5.1
1
lishimeng/zoo:v0.4.0e0b8d2d8ca28
github.com/eclipse/paho.mqtt.golang@v1.4.3
1.5.1
1
megaease/easegress:latestfad1c7452958
github.com/eclipse/paho.mqtt.golang@v1.4.3
1.5.1
1
minio/minio:RELEASE.2020-12-03T05-49-24Z053f103f4894
github.com/eclipse/paho.mqtt.golang@v1.2.0
1.5.1
1
minio/minio:RELEASE.2022-01-04T07-41-07Z1484c87239ea
github.com/eclipse/paho.mqtt.golang@v1.3.0
1.5.1
1
minio/minio:RELEASE.2025-01-20T14-49-07Z-cpuv114b7076ca85a
github.com/eclipse/paho.mqtt.golang@v1.5.0
1.5.1
1
minio/minio:RELEASE.2024-05-28T17-19-04Z391d1d45fdbe
github.com/eclipse/paho.mqtt.golang@v1.4.3
1.5.1
1
minio/minio:RELEASE.2025-03-12T18-04-18Z46b3009bf704
github.com/eclipse/paho.mqtt.golang@v1.5.0
1.5.1
1
minio/minio:RELEASE.2024-01-16T16-07-38Z4c4a4876193f
github.com/eclipse/paho.mqtt.golang@v1.4.3
1.5.1
1
minio/minio:RELEASE.2024-01-18T22-51-28Z551682a57a94
github.com/eclipse/paho.mqtt.golang@v1.4.3
1.5.1
1
minio/minio:RELEASE.2023-03-20T20-16-18Z6d770d7f255c
github.com/eclipse/paho.mqtt.golang@v1.4.2
1.5.1
1
minio/minio:RELEASE.2023-11-20T22-40-07Zb833a1699b4f
github.com/eclipse/paho.mqtt.golang@v1.4.3
1.5.1
1
minio/minio:RELEASE.2025-07-23T15-54-02Zd249d1fb6966
github.com/eclipse/paho.mqtt.golang@v1.5.0
1.5.1
1
minio/minio:RELEASE.2020-09-17T04-49-20Ze2b7b633c250
github.com/eclipse/paho.mqtt.golang@v1.2.0
1.5.1
1
minio/minio:RELEASE.2020-01-03T19-12-21Zf00aa6ef2b72
github.com/eclipse/paho.mqtt.golang@v1.2.0
1.5.1
1
minio/minio:RELEASE.2022-10-24T18-35-07Zf9576903f19d
github.com/eclipse/paho.mqtt.golang@v1.4.1
1.5.1
1
minio/minio:RELEASE.2023-01-12T02-06-16Zfc6bedc99355
github.com/eclipse/paho.mqtt.golang@v1.4.2
1.5.1
1
sarwansharma/minio:v359d1da9385d1
github.com/eclipse/paho.mqtt.golang@v1.3.5
1.5.1
1
sigma2as/minio:20240306-3a2e4f5c284ead9ec3e
github.com/eclipse/paho.mqtt.golang@v1.4.1
1.5.1
1
tile38/tile38:1.33.4afb7e82f9485
github.com/eclipse/paho.mqtt.golang@v1.3.1
1.5.1
1
tobiasehlert/teslamateapi:1.20.2cf09259ad0ea
github.com/eclipse/paho.mqtt.golang@v1.5.0
1.5.1
1
wallarm/node-helpers:5.0.2-1097cadc42336
github.com/eclipse/paho.mqtt.golang@v1.2.0
1.5.1
1
wallarm/node-next:0.5.24314f3d2b918
github.com/eclipse/paho.mqtt.golang@v1.5.0
1.5.1
1
wazuh/wazuh-manager:4.11.11da5c38c6a78
github.com/eclipse/paho.mqtt.golang@v1.2.1-0.20200121105743-0d940dd29fd2
1.5.1
1
wazuh/wazuh-manager:4.4.121994f40e0da
github.com/eclipse/paho.mqtt.golang@v1.2.1-0.20200121105743-0d940dd29fd2
1.5.1
1
wazuh/wazuh-manager:4.14.45a065930682d
github.com/eclipse/paho.mqtt.golang@v1.2.1-0.20200121105743-0d940dd29fd2
1.5.1
1
wazuh/wazuh-manager:4.14.3f09282d281f6
github.com/eclipse/paho.mqtt.golang@v1.2.1-0.20200121105743-0d940dd29fd2
1.5.1
1
zabbix/zabbix-agent2:ubuntu-7.0.237322a94c5d7a
github.com/eclipse/paho.mqtt.golang@v1.4.2
1.5.1
1
zabbix/zabbix-agent2:ubuntu-6.0.8e5b594057c9c
github.com/eclipse/paho.mqtt.golang@v1.2.0
1.5.1
1
ghcr.io/analogj/scrutiny:master-omnibus18689773150d
github.com/eclipse/paho.mqtt.golang@v1.2.0
1.5.1
1
ghcr.io/coollabsio/minio:RELEASE.2025-10-15T17-29-55Z69b55a1c1c5d
github.com/eclipse/paho.mqtt.golang@v1.5.0
1.5.1
1
ghcr.io/liangyuanpeng/chirpstack-event-forward:v0.1.223dc6274cc4b
github.com/eclipse/paho.mqtt.golang@v1.3.5
1.5.1
1
ghcr.io/openfaas/mqtt-connector:0.4.33311a30b8fe6
github.com/eclipse/paho.mqtt.golang@v1.4.1
1.5.1
1
ghcr.io/warpstreamlabs/bento:1.8.121715979aefa
github.com/eclipse/paho.mqtt.golang@v1.4.3
1.5.1
1
public.ecr.aws/v0r6c2e2/minio:latest08c90bd040bf
github.com/eclipse/paho.mqtt.golang@v1.5.0
1.5.1
1
quay.io/influxdb/chronograf:1.9.4bb0a980bc2bf
github.com/eclipse/paho.mqtt.golang@v1.2.0
1.5.1
1
quay.io/influxdb/chronograf:1.9.3c2ed16080689
github.com/eclipse/paho.mqtt.golang@v1.2.0
1.5.1
1
quay.io/minio/minio:RELEASE.2023-12-20T01-00-02Z5702ea361420
github.com/eclipse/paho.mqtt.golang@v1.4.3
1.5.1
1
quay.io/minio/minio:RELEASE.2024-01-11T07-46-16Z796f75ea413b
github.com/eclipse/paho.mqtt.golang@v1.4.3
1.5.1
1
quay.io/minio/minio:RELEASE.2022-09-17T00-09-45Zc3d20bc2ea08
github.com/eclipse/paho.mqtt.golang@v1.4.1
1.5.1
1
quay.io/minio/minio:RELEASE.2024-06-04T19-20-08Zc6b68f158628
github.com/eclipse/paho.mqtt.golang@v1.4.3
1.5.1
1
quay.io/minio/minio:RELEASE.2022-10-24T18-35-07Zd853057f2800
github.com/eclipse/paho.mqtt.golang@v1.4.1
1.5.1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.