Go/github.com/neuvector/scanner CVE-2025-67860: low 3.8, EPSS 0.10%
NeuVector scanner insecurely handles passwords as command arguments in github.com/neuvector/scanner
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
No fixed version in the source.
Sources
- osv: GO-2026-4490
- nvd: CVE-2025-67860
- https://github.com/neuvector/scanner/security/advisories/GHSA-3c9m-gq32-g4jx
- https://github.com/neuvector/scanner/commit/c2f0f9268468e49eb3addea923156123c4465794
- https://github.com/neuvector/scanner/releases/tag/v4.072
CVE-2025-67860 · published · modified · JSON