Go/github.com/neuvector/neuvector CVE-2025-54470: high 8.6, EPSS 0.20%
NeuVector telemetry sender is vulnerable to MITM and DoS in github.com/neuvector/neuvector
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
No fixed version in the source.
Sources
- osv: GO-2025-4044
- nvd: CVE-2025-54470
- https://github.com/neuvector/neuvector/security/advisories/GHSA-qqj3-g7mx-5p4w
- https://github.com/neuvector/neuvector/commit/06424701e69bf1eb76ff90180d78853fded93021
- https://github.com/neuvector/neuvector/commit/415737cbec581a5dc5f204fac1c78b7f29ad7dc2
CVE-2025-54470 · published · modified · JSON