CVE-2025-11065
MediumAdvisory
Published 21 Aug 2025In the index since 5 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 5.3
- base score, highest
- EPSS
- 0.004
- 30th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 81
- of 17,781 indexed, latest versions
- Container images
- 75
- deployed by those charts
- Fix available
- 1 of 1
- affected package
go-viper's mapstructure May Leak Sensitive Information in Logs When Processing Malformed Data
Carried by container images the latest versions of 81 of 17,781 indexed charts deploy, on 75 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| github.com/ | v2.0.0, v2.0.0-alpha.1, v2.1.0, v2.2.1+1 more | 2.4.0 | 75 |
- OSV records
- GHSA-2464-8j7c-4cjm
- Also known as
- GO-2025-3900
Charts affected
81 by stars
Container images carrying it
75 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| registry.k8s.io/ | e750cd4b43f7 | github.com/ | 2.4.0 | 4 |
| registry.k8s.io/ | 2bbc91556733 | github.com/ | 2.4.0 | 3 |
| grafana/ | 7790f6f7fbd8 | github.com/ | 2.4.0 | 2 |
| grafana/ | f0200a9bff6d | github.com/ | 2.4.0 | 2 |
| mattermost/ | b8bd1246cb3a | github.com/ | 2.4.0 | 2 |
| otel/ | 7ef2a2ff46b9 | github.com/ | 2.4.0 | 2 |
| otel/ | 32b3c8296dcc | github.com/ | 2.4.0 | 2 |
| uselagoon/ | 2c89ed939b8b | github.com/ | 2.4.0 | 2 |
| ghcr.io/ | f115777d1112 | github.com/ | 2.4.0 | 2 |
| ghcr.io/ | 58afba209ea0 | github.com/ | 2.4.0 | 2 |
| quay.io/ | 1d022ef4b8ef | github.com/ | 2.4.0 | 2 |
| 1dev/ | cd5b12fe5471 | github.com/ | 2.4.0 | 1 |
| alpine/ | 6dbe6f391eda | github.com/ | 2.4.0 | 1 |
| bitnamilegacy/ | 04a3044b384b | github.com/ | 2.4.0 | 1 |
| bitnamilegacy/ | 0cb31d0fc356 | github.com/ | 2.4.0 | 1 |
| darthsim/ | 7d12c7c8fc66 | github.com/ | 2.4.0 | 1 |
| djjudas21/ | e9094580885c | github.com/ | 2.4.0 | 1 |
| emqxecp/ | 4c31d9bec846 | github.com/ | 2.4.0 | 1 |
| gitea/ | 6120b1165f3a | github.com/ | 2.4.0 | 1 |
| grafana/ | 3364714a2f64 | github.com/ | 2.4.0 | 1 |
| grafana/ | 01a63f4e032c | github.com/ | 2.4.0 | 1 |
| grafana/ | 06bdcbb51fc2 | github.com/ | 2.4.0 | 1 |
| grafana/ | c3dac4e26471 | github.com/ | 2.4.0 | 1 |
| grafana/ | a1701c218024 | github.com/ | 2.4.0 | 1 |
| grafana/ | b5b59bfc7561 | github.com/ | 2.4.0 | 1 |
| grafana/ | 09d8c3ce4f3a | github.com/ | 2.4.0 | 1 |
| grafana/ | f55a8a1937ff | github.com/ | 2.4.0 | 1 |
| headscale/ | a7a8ae9616bb | github.com/ | 2.4.0 | 1 |
| jaegertracing/ | f6b5d09073f1 | github.com/ | 2.4.0 | 1 |
| kubeovn/ | 6722b54eb5c0 | github.com/ | 2.4.0 | 1 |
| layer5/ | 78a8be21bef3 | github.com/ | 2.4.0 | 1 |
| library/ | 851f91d24121 | github.com/ | 2.4.0 | 1 |
| library/ | aa3df78ecf32 | github.com/ | 2.4.0 | 1 |
| library/ | dd43b430341a | github.com/ | 2.4.0 | 1 |
| library/ | 104204dadedf | github.com/ | 2.4.0 | 1 |
| lightstep/ | c800e05e1eff | github.com/ | 2.4.0 | 1 |
| nathanfirmo/ | 6b0487e6e987 | github.com/ | 2.4.0 | 1 |
| neosmemo/ | 3eefcc231141 | github.com/ | 2.4.0 | 1 |
| neosmemo/ | c6defc2dfb98 | github.com/ | 2.4.0 | 1 |
| openfga/ | 5e94966c11df | github.com/ | 2.4.0 | 1 |
| otel/ | 9e36620d6c2c | github.com/ | 2.4.0 | 1 |
| otel/ | 37fa87091cfa | github.com/ | 2.4.0 | 1 |
| otel/ | 5ac3e0ba2b0b | github.com/ | 2.4.0 | 1 |
| otel/ | 923eb1cfae32 | github.com/ | 2.4.0 | 1 |
| otel/ | 1e45d9483faa | github.com/ | 2.4.0 | 1 |
| schemahero/ | 1609e1a05cd3 | github.com/ | 2.4.0 | 1 |
| snyk/ | fb5ad76ce84e | github.com/ | 2.4.0 | 1 |
| stashapp/ | a534c8afdf39 | github.com/ | 2.4.0 | 1 |
| wallarm/ | aecd88b24c51 | github.com/ | 2.4.0 | 1 |
| ghcr.io/ | 7e7a26393cd1 | github.com/ | 2.4.0 | 1 |