tocsin

CVE-2025-13353

2 advisories.

Go/github.com/cloudflare/gokey CVE-2025-13353: medium 5.5, EPSS 0.16%

gokey allows secret recovery from a seed file without the master password

Action: Upgrade github.com/cloudflare/gokey to 0.2.0 or later.

go get github.com/cloudflare/gokey@v0.2.0

Affected

introducedfixedlast affected
00.2.0-

Fixed versions

0.2.0

Sources

CVE-2025-13353 · published · modified · JSON

Go/github.com/cloudflare/gokey CVE-2025-13353: medium 5.5, EPSS 0.16%

gokey allows secret recovery from a seed file without the master password in github.com/cloudflare/gokey

Action: Upgrade github.com/cloudflare/gokey to 0.2.0 or later.

go get github.com/cloudflare/gokey@v0.2.0

Affected

introducedfixedlast affected
00.2.0-

Fixed versions

0.2.0

Sources

CVE-2025-13353 · published · modified · JSON