Go/github.com/in-toto/go-witness CVE-2025-62375: medium 6.9, EPSS 0.20%
go-witness is Vulnerable to Improper Verification of AWS EC2 Identity Documents
Action: Upgrade github.com/in-toto/go-witness to 0.9.1 or later.
go get github.com/in-toto/go-witness@v0.9.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.9.1 | - |
Fixed versions
| 0.9.1 |
Sources
- osv: GHSA-72c7-4g63-hpw5
- nvd: CVE-2025-62375
- https://github.com/in-toto/go-witness/security/advisories/GHSA-72c7-4g63-hpw5
- https://github.com/in-toto/go-witness/commit/04ff20b600e28ce8fd1aa287534dd383a1cfefb9
- https://github.com/in-toto/go-witness
CVE-2025-62375 · published · modified · JSON