Go/github.com/neuvector/neuvector CVE-2025-54471: medium 6.5, EPSS 0.27%
NeuVector is shipping cryptographic material into its binary in github.com/neuvector/neuvector
Action: Upgrade github.com/neuvector/neuvector to 0.0.0-20251020133207-084a437033b4 or later.
go get github.com/neuvector/neuvector@v0.0.0-20251020133207-084a437033b4Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.0.0-20230727023453-1c4957d53911 | 0.0.0-20251020133207-084a437033b4 | - |
Fixed versions
| 0.0.0-20251020133207-084a437033b4 |
Sources
- osv: GO-2025-4043
- nvd: CVE-2025-54471
- https://github.com/neuvector/neuvector/security/advisories/GHSA-h773-7gf7-9m2x
- https://github.com/neuvector/neuvector/commit/084a437033b491eeea11bdba1a09dd84ed12ea88
CVE-2025-54471 · published · modified · JSON