Go/github.com/neuvector/neuvector CVE-2025-54469: critical 9.9, EPSS 0.47%
NeuVector Enforcer is vulnerable to Command Injection and Buffer overflow in github.com/neuvector/neuvector
Action: Upgrade github.com/neuvector/neuvector to 0.0.0-20251020133207-084a437033b4 or later.
go get github.com/neuvector/neuvector@v0.0.0-20251020133207-084a437033b4Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.0.0-20230727023453-1c4957d53911 | 0.0.0-20251020133207-084a437033b4 | - |
Fixed versions
| 0.0.0-20251020133207-084a437033b4 |
Sources
- osv: GO-2025-4042
- nvd: CVE-2025-54469
- https://github.com/neuvector/neuvector/security/advisories/GHSA-c8g6-qrwh-m3vp
CVE-2025-54469 · published · modified · JSON