Go/github.com/jon4hz/jellysweep CVE-2025-64178: high 8.9, EPSS 0.32%
Jellysweep uses uncontrolled data in image cache API endpoint
Action: Upgrade github.com/jon4hz/jellysweep to 0.13.0 or later.
go get github.com/jon4hz/jellysweep@v0.13.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.13.0 | - |
Fixed versions
| 0.13.0 |
Sources
- osv: GHSA-xc93-q32j-cpcg
- nvd: CVE-2025-64178
- https://github.com/jon4hz/jellysweep/security/advisories/GHSA-xc93-q32j-cpcg
- https://github.com/jon4hz/jellysweep/commit/17466312510966418aea941e4944229856d55101
- https://github.com/jon4hz/jellysweep
CVE-2025-64178 · published · modified · JSON