CVE-2025-24355
2 advisories.
Go/github.com/updatecli/updatecli CVE-2025-24355: high 7.1, EPSS 0.22%
Updatecli exposes Maven credentials in console output
Action: Upgrade github.com/updatecli/updatecli to 0.93.0 or later.
go get github.com/updatecli/updatecli@v0.93.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.93.0 | - |
Fixed versions
| 0.93.0 |
Sources
- osv: GHSA-v34r-vj4r-38j6
- https://github.com/updatecli/updatecli/security/advisories/GHSA-v34r-vj4r-38j6
- https://nvd.nist.gov/vuln/detail/CVE-2025-24355
- https://github.com/updatecli/updatecli/commit/344b28091ffeca5ed32e8d0f9eda542842fcd3fa
- https://github.com/updatecli/updatecli
- https://www.updatecli.io/docs/plugins/resource/maven
CVE-2025-24355 · published · modified · JSON
Go/github.com/updatecli/updatecli CVE-2025-24355: unknown, EPSS 0.22%
Updatecli exposes Maven credentials in console output in github.com/updatecli/updatecli
Action: Upgrade github.com/updatecli/updatecli to 0.93.0 or later.
go get github.com/updatecli/updatecli@v0.93.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.93.0 | - |
Fixed versions
| 0.93.0 |
Sources
- osv: GO-2025-3419
- https://github.com/updatecli/updatecli/security/advisories/GHSA-v34r-vj4r-38j6
- https://nvd.nist.gov/vuln/detail/CVE-2025-24355
- https://github.com/updatecli/updatecli/commit/344b28091ffeca5ed32e8d0f9eda542842fcd3fa
- https://www.updatecli.io/docs/plugins/resource/maven
CVE-2025-24355 · published · modified · JSON