Go/github.com/ulikunitz/xz CVE-2025-58058: medium 5.3, EPSS 0.43%
github.com/ulikunitz/xz leaks memory when decoding a corrupted multiple LZMA archives
Action: Upgrade github.com/ulikunitz/xz to 0.5.15 or later.
go get github.com/ulikunitz/xz@v0.5.15Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.5.15 | - |
Fixed versions
| 0.5.15 |
Sources
- osv: GHSA-jc7w-c686-c4v9
- https://github.com/ulikunitz/xz/security/advisories/GHSA-jc7w-c686-c4v9
- https://nvd.nist.gov/vuln/detail/CVE-2025-58058
- https://github.com/ulikunitz/xz/commit/88ddf1d0d98d688db65de034f48960b2760d2ae2
- https://github.com/ulikunitz/xz
CVE-2025-58058 · published · modified · JSON