StackRadar

CVE-2025-10543

Medium

Advisory

Published 2 Dec 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.3
base score, highest
EPSS
0.002
13th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
111
of 17,781 indexed, latest versions
Container images
93
deployed by those charts
Fix available
1 of 1
affected package

Eclipse Paho Go MQTT may incorrectly encode strings if length exceeds 65535 bytes

Carried by container images the latest versions of 111 of 17,781 indexed charts deploy, on 93 images.

Affected packageAffected versionsFixed inImages
github.com/eclipse/paho.mqtt.golanggolangv1.2.0, v1.2.1-0.20200121105743-0d940dd29fd2, v1.3.0, v1.3.1+5 more1.5.193
OSV records
GHSA-32fw-gq77-f2f2
Also known as
GO-2025-4173

Charts affected

111 by stars
ChartLatestAffected imagesRadar Score
wazuhwazuh-helm-eksVerified publisher1.2.101 of 6See more

wazuh wazuh-helm-eks 1.2.10

1 of the 6 container images this version deploys carry CVE-2025-10543.

Container imageDigestPackageFixed in
wazuh/wazuh-manager:4.14.45a065930682d
github.com/eclipse/paho.mqtt.golang@v1.2.1-0.20200121105743-0d940dd29fd2
1.5.1

Open the chart page →

5,484
wazuh-manager-filebeatwazuh-manager-filebeat0.1.0-gamma1 of 1See more

wazuh-manager-filebeat wazuh-manager-filebeat 0.1.0-gamma

1 of the 1 container images this version deploys carry CVE-2025-10543.

Container imageDigestPackageFixed in
iosifache/wazuh-manager-filebeat:latest85df3f04b5da
github.com/eclipse/paho.mqtt.golang@v1.2.1-0.20200121105743-0d940dd29fd2
1.5.1

Open the chart page →

11,119
miniowenerme8.0.101 of 1See more

minio wenerme 8.0.10

1 of the 1 container images this version deploys carry CVE-2025-10543.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2021-02-14T04-01-33Zbd11edda91f3
github.com/eclipse/paho.mqtt.golang@v1.3.0
1.5.1

Open the chart page →

6,915
minio-standalonewenerme1.0.21 of 1See more

minio-standalone wenerme 1.0.2

1 of the 1 container images this version deploys carry CVE-2025-10543.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2022-01-04T07-41-07Z1484c87239ea
github.com/eclipse/paho.mqtt.golang@v1.3.0
1.5.1

Open the chart page →

6,138
wexa-studiowexa-studio1.2.01 of 15See more

wexa-studio wexa-studio 1.2.0

1 of the 15 container images this version deploys carry CVE-2025-10543.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2024-01-16T16-07-38Z4c4a4876193f
github.com/eclipse/paho.mqtt.golang@v1.4.3
1.5.1

Open the chart page →

14,983
oauth2xdVerified publisher1.0.01 of 1See more

oauth2 xd 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-10543.

Container imageDigestPackageFixed in
lishimeng/hufu:v1.2.13d5752dac834
github.com/eclipse/paho.mqtt.golang@v1.4.2
1.5.1

Open the chart page →

2,007
owlxdVerified publisher0.5.12 of 2See more

owl xd 0.5.1

2 of the 2 container images this version deploys carry CVE-2025-10543.

Container imageDigestPackageFixed in
lishimeng/owl-console:v0.11.2c79a67657baf
github.com/eclipse/paho.mqtt.golang@v1.4.3
1.5.1
lishimeng/owl-messager:v0.11.23d00485e64dc
github.com/eclipse/paho.mqtt.golang@v1.4.3
1.5.1

Open the chart page →

3,880
passportxdVerified publisher0.2.162 of 2See more

passport xd 0.2.16

2 of the 2 container images this version deploys carry CVE-2025-10543.

Container imageDigestPackageFixed in
lishimeng/passport:v0.2.163e7d05ded625
github.com/eclipse/paho.mqtt.golang@v1.4.2
1.5.1
lishimeng/passport-profile:v0.2.160970dfe5dc8f
github.com/eclipse/paho.mqtt.golang@v1.4.2
1.5.1

Open the chart page →

3,974
tabbyxdVerified publisher1.0.61 of 2See more

tabby xd 1.0.6

1 of the 2 container images this version deploys carry CVE-2025-10543.

Container imageDigestPackageFixed in
lishimeng/tabby:v1.0.48145c3dc83c8
github.com/eclipse/paho.mqtt.golang@v1.4.2
1.5.1

Open the chart page →

7,673
treexdVerified publisher0.1.101 of 1See more

tree xd 0.1.10

1 of the 1 container images this version deploys carry CVE-2025-10543.

Container imageDigestPackageFixed in
lishimeng/tree:v0.2.89b2f8be6c7d3
github.com/eclipse/paho.mqtt.golang@v1.4.2
1.5.1

Open the chart page →

1,997
zooxdVerified publisher0.4.01 of 1See more

zoo xd 0.4.0

1 of the 1 container images this version deploys carry CVE-2025-10543.

Container imageDigestPackageFixed in
lishimeng/zoo:v0.4.0e0b8d2d8ca28
github.com/eclipse/paho.mqtt.golang@v1.4.3
1.5.1

Open the chart page →

1,955

Container images carrying it

93 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
minio/minio:latest:RELEASE.2025-09-07T16-13-09Z14cea493d9a3
github.com/eclipse/paho.mqtt.golang@v1.5.0
1.5.1
16
quay.io/minio/minio:RELEASE.2024-12-18T13-15-44Z1dce27c494a1
github.com/eclipse/paho.mqtt.golang@v1.5.0
1.5.1
8
minio/minio:RELEASE.2021-02-14T04-01-33Zbd11edda91f3
github.com/eclipse/paho.mqtt.golang@v1.3.0
1.5.1
3
bitnamilegacy/influxdb:2.6.1-debian-11-r18d17df1f9d745
github.com/eclipse/paho.mqtt.golang@v1.2.0
1.5.1
2
library/influxdb:2.6.1-alpine44a366dd7724
github.com/eclipse/paho.mqtt.golang@v1.2.0
1.5.1
2
library/influxdb:2.7b8d940ca9376
github.com/eclipse/paho.mqtt.golang@v1.2.0
1.5.1
2
quay.io/minio/minio:RELEASE.2023-09-30T07-02-29Z6262bc9a2730
github.com/eclipse/paho.mqtt.golang@v1.4.3
1.5.1
2
quay.io/minio/minio:RELEASE.2023-07-21T21-12-44Z8e5e9490cd50
github.com/eclipse/paho.mqtt.golang@v1.4.3
1.5.1
2
quay.io/minio/minio:RELEASE.2023-02-10T18-48-39Za0a002cb113c
github.com/eclipse/paho.mqtt.golang@v1.4.2
1.5.1
2
assistiot/cybersecurity-monitoring_id-wzh:latest0aacefac9677
github.com/eclipse/paho.mqtt.golang@v1.2.1-0.20200121105743-0d940dd29fd2
1.5.1
1
bitnamilegacy/minio:2023.12.230b60b6565ab2
github.com/eclipse/paho.mqtt.golang@v1.4.3
1.5.1
1
bitnamilegacy/minio:2022.12.12-debian-11-r90f7c8ac484ac
github.com/eclipse/paho.mqtt.golang@v1.4.1
1.5.1
1
bitnamilegacy/minio:2024.8.3-debian-12-r15501c419f42e
github.com/eclipse/paho.mqtt.golang@v1.4.3
1.5.1
1
bitnamilegacy/minio:2023.12.23-debian-11-r25bb0aa825d16
github.com/eclipse/paho.mqtt.golang@v1.4.3
1.5.1
1
bitnamilegacy/minio:2025.7.23-debian-12-r56dabb4a2088c
github.com/eclipse/paho.mqtt.golang@v1.5.0
1.5.1
1
bitnamilegacy/minio:2025.7.23-debian-12-r08935e75fa5d1
github.com/eclipse/paho.mqtt.golang@v1.5.0
1.5.1
1
bitnamilegacy/minio:2024.7.4-debian-12-r0952f86d1116c
github.com/eclipse/paho.mqtt.golang@v1.4.3
1.5.1
1
bitnamilegacy/minio:2025.3.12-debian-12-r0ba9f3b4b0b00
github.com/eclipse/paho.mqtt.golang@v1.5.0
1.5.1
1
bitnamilegacy/minio:2024.12.18-debian-12-r1c0ede65eb88e
github.com/eclipse/paho.mqtt.golang@v1.5.0
1.5.1
1
bitnamilegacy/minio:2024.12.18-debian-12-r0cce234b4381a
github.com/eclipse/paho.mqtt.golang@v1.5.0
1.5.1
1
bitnamilegacy/minio:2025.4.22-debian-12-r1d7cd0e172c4c
github.com/eclipse/paho.mqtt.golang@v1.5.0
1.5.1
1
chirpstack/chirpstack-application-server:3.17.6e0b23dfd24d6
github.com/eclipse/paho.mqtt.golang@v1.3.1
1.5.1
1
chirpstack/chirpstack-application-server:3fb7667fe037f
github.com/eclipse/paho.mqtt.golang@v1.4.1
1.5.1
1
chirpstack/chirpstack-gateway-bridge:3.13.2ce3f2cdca8a9
github.com/eclipse/paho.mqtt.golang@v1.3.0
1.5.1
1
chirpstack/chirpstack-network-server:3c0bbbb7a3f1e
github.com/eclipse/paho.mqtt.golang@v1.4.2
1.5.1
1
chirpstack/chirpstack-network-server:3.16.1c98d7fe06bce
github.com/eclipse/paho.mqtt.golang@v1.2.0
1.5.1
1
emqx/ecp-emqx-agent-downloader:2.5.1a8431baa7950
github.com/eclipse/paho.mqtt.golang@v1.4.3
1.5.1
1
emqx/ecp-main:2.5.1fa876f71e5d6
github.com/eclipse/paho.mqtt.golang@v1.4.1
1.5.1
1
falcosecurity/falcosidekick:2.32.01976da721518
github.com/eclipse/paho.mqtt.golang@v1.5.0
1.5.1
1
falcosecurity/falcosidekick:2.27.0828ee36cb13a
github.com/eclipse/paho.mqtt.golang@v1.4.1
1.5.1
1
gboxproxy/gbox:v1.0.63a9f4a711d5c
github.com/eclipse/paho.mqtt.golang@v1.2.0
1.5.1
1
hyperledgerk8s/minio-minio:RELEASE.2023-02-10T18-48-39Zed0b0c56f1ea
github.com/eclipse/paho.mqtt.golang@v1.4.2
1.5.1
1
iosifache/wazuh-manager-filebeat:latest85df3f04b5da
github.com/eclipse/paho.mqtt.golang@v1.2.1-0.20200121105743-0d940dd29fd2
1.5.1
1
iotaledger/hornet:2.001206f1ba89c
github.com/eclipse/paho.mqtt.golang@v1.4.3
1.5.1
1
iotaledger/inx-dashboard:1.012c669cb8748
github.com/eclipse/paho.mqtt.golang@v1.4.3
1.5.1
1
library/chronograf:1.9.496d8a3f65a4f
github.com/eclipse/paho.mqtt.golang@v1.2.0
1.5.1
1
library/influxdb:2.8571eb4514977
github.com/eclipse/paho.mqtt.golang@v1.2.0
1.5.1
1
library/influxdb:2.7.4-alpinea10d46445d68
github.com/eclipse/paho.mqtt.golang@v1.2.0
1.5.1
1
library/influxdb:2.0.8ba10ac9ba17a
github.com/eclipse/paho.mqtt.golang@v1.2.0
1.5.1
1
library/influxdb:2.3.0-alpined7f5dd5f70e2
github.com/eclipse/paho.mqtt.golang@v1.2.0
1.5.1
1
library/kapacitor:1.6.37232f6388a4d
github.com/eclipse/paho.mqtt.golang@v1.2.0
1.5.1
1
library/telegraf:1.20.428e98eece020
github.com/eclipse/paho.mqtt.golang@v1.3.0
1.5.1
1
library/telegraf:1.27507a3eecf809
github.com/eclipse/paho.mqtt.golang@v1.4.2
1.5.1
1
library/telegraf:1.19.0-alpine794079a7f241
github.com/eclipse/paho.mqtt.golang@v1.3.0
1.5.1
1
library/telegraf:1.19-alpineaddb86c0c520
github.com/eclipse/paho.mqtt.golang@v1.3.0
1.5.1
1
lishimeng/hufu:v1.2.13d5752dac834
github.com/eclipse/paho.mqtt.golang@v1.4.2
1.5.1
1
lishimeng/owl-console:v0.11.2c79a67657baf
github.com/eclipse/paho.mqtt.golang@v1.4.3
1.5.1
1
lishimeng/owl-messager:v0.11.23d00485e64dc
github.com/eclipse/paho.mqtt.golang@v1.4.3
1.5.1
1
lishimeng/passport:v0.2.163e7d05ded625
github.com/eclipse/paho.mqtt.golang@v1.4.2
1.5.1
1
lishimeng/passport-profile:v0.2.160970dfe5dc8f
github.com/eclipse/paho.mqtt.golang@v1.4.2
1.5.1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.