Go/chainguard.dev/apko CVE-2025-53945: unknown, EPSS 0.14%
apko is vulnerable to attack through incorrect permissions in /etc/ld.so.cache and other files in chainguard.dev/apko
Action: Upgrade chainguard.dev/apko to 0.29.5 or later.
go get chainguard.dev/apko@v0.29.5Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.27.0 | 0.29.5 | - |
Fixed versions
| 0.29.5 |
Sources
- osv: GO-2025-3816
- https://github.com/chainguard-dev/apko/security/advisories/GHSA-x6ph-r535-3vjw
- https://nvd.nist.gov/vuln/detail/CVE-2025-53945
- https://github.com/chainguard-dev/apko/commit/04f37e2d50d5a502e155788561fb7d40de705bd9
- https://github.com/chainguard-dev/apko/commit/aedb0772d6bf6e74d8f17690946dbc791d0f6af3
- https://github.com/chainguard-dev/apko/releases/tag/v0.29.5
CVE-2025-53945 · published · modified · JSON