Go/github.com/ulikunitz/xz CVE-2025-58058: medium 5.3, EPSS 0.43%
Memory leaks when decoding a corrupted multiple LZMA archives in github.com/ulikunitz/xz
Action: Upgrade github.com/ulikunitz/xz to 0.5.15 or later.
go get github.com/ulikunitz/xz@v0.5.15Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.5.15 | - |
Fixed versions
| 0.5.15 |
Sources
- osv: GO-2025-3922
- nvd: CVE-2025-58058
- https://github.com/ulikunitz/xz/security/advisories/GHSA-jc7w-c686-c4v9
- https://github.com/ulikunitz/xz/commit/88ddf1d0d98d688db65de034f48960b2760d2ae2
CVE-2025-58058 · published · modified · JSON