Go/github.com/neuvector/scanner CVE-2025-67860: low 3.8, EPSS 0.10%
NeuVector scanner insecurely handles passwords as command arguments
Action: Upgrade github.com/neuvector/scanner to 4.072 or later.
go get github.com/neuvector/scanner@v4.072Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.0 | 4.072 | - |
Fixed versions
| 4.072 |
Sources
- osv: GHSA-3c9m-gq32-g4jx
- https://github.com/neuvector/scanner/security/advisories/GHSA-3c9m-gq32-g4jx
- https://nvd.nist.gov/vuln/detail/CVE-2025-67860
- https://github.com/neuvector/scanner/commit/c2f0f9268468e49eb3addea923156123c4465794
- https://bugzilla.suse.com/show_bug.cgi?id=CVE-2025-67860
- https://github.com/neuvector/scanner
- https://github.com/neuvector/scanner/releases/tag/v4.072
CVE-2025-67860 · published · modified · JSON