Go/github.com/inspektor-gadget/inspektor-gadget CVE-2026-25996: critical 9.8, EPSS 0.64%

Inspektor Gadget uses unsanitized ANSI Escape Sequences In `columns` Output Mode in github.com/inspektor-gadget/inspektor-gadget

Action: Upgrade github.com/inspektor-gadget/inspektor-gadget to 0.49.1 or later.

go get github.com/inspektor-gadget/inspektor-gadget@v0.49.1

Affected

Fixed versions

Sources

• osv: GO-2026-5068
• nvd: CVE-2026-25996
• https://github.com/inspektor-gadget/inspektor-gadget/security/advisories/GHSA-34r5-6j7w-235f
• https://github.com/inspektor-gadget/inspektor-gadget/commit/d59cf72971f9b7110d9c179dc8ae8b7a11dbd6d2
• https://github.com/inspektor-gadget/inspektor-gadget/releases/tag/v0.49.1

CVE-2026-25996 · published 2026-06-25T18:26:48Z · modified 2026-06-25T18:45:16.505552436Z · JSON