CVE-2025-53884

Go/github.com/neuvector/neuvector CVE-2025-53884: medium 5.3, EPSS 0.18%

NeuVector has an insecure password storage and is vulnerable to rainbow attack

Action: Upgrade github.com/neuvector/neuvector to 0.0.0-20250825191744-da1a462074c3 or later.

go get github.com/neuvector/neuvector@v0.0.0-20250825191744-da1a462074c3

Affected

Fixed versions

Sources

• osv: GHSA-8ff6-pc43-jwv3
• https://github.com/neuvector/neuvector/security/advisories/GHSA-8ff6-pc43-jwv3
• https://nvd.nist.gov/vuln/detail/CVE-2025-53884
• https://github.com/neuvector/neuvector/pull/2084
• https://github.com/neuvector/neuvector/pull/2085
• https://github.com/neuvector/neuvector/commit/addc9308b3a6359c9789a62ac6e73594c9a544d0
• https://github.com/neuvector/neuvector/commit/da1a462074c3d7d426dba0901840fd0e2146f63a
• https://bugzilla.suse.com/show_bug.cgi?id=CVE-2025-53884
• https://github.com/neuvector/neuvector

CVE-2025-53884 · published 2025-08-28T13:33:14Z · modified 2026-09-10T03:50:26.855116078Z · JSON

Go/github.com/neuvector/neuvector CVE-2025-53884: unknown, EPSS 0.18%

NeuVector has an insecure password storage vulnerable to rainbow attack in github.com/neuvector/neuvector

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GO-2025-3917
• https://github.com/neuvector/neuvector/security/advisories/GHSA-8ff6-pc43-jwv3

CVE-2025-53884 · published 2025-09-08T14:13:10Z · modified 2026-07-02T14:44:22.626547900Z · JSON