CVE-2025-5981
2 advisories.
Go/github.com/google/osv-scalibr CVE-2025-5981: medium
OSV-SCALIBR's Container Image Unpacking Vulnerable to Arbitrary File Write via Path Traversal
Action: Upgrade github.com/google/osv-scalibr to 0.2.1 or later.
go get github.com/google/osv-scalibr@v0.2.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.1.3 | 0.2.1 | - |
Fixed versions
| 0.2.1 |
Sources
- osv: GHSA-2hcm-q3f4-fjgw
- https://nvd.nist.gov/vuln/detail/CVE-2025-5981
- https://github.com/google/osv-scalibr/commit/2444419b1818c2d6917fc3394c947fb3276e9d59
- https://github.com/google/osv-scalibr
- https://github.com/google/osv-scalibr/releases/tag/v0.1.8
- https://pkg.go.dev/vuln/GO-2025-3767
CVE-2025-5981 · published · modified · JSON
Go/github.com/google/osv-scalibr CVE-2025-5981: unknown
OSV-SCALIBR's Container Image Unpacking Vulnerable to Arbitrary File Write via Path Traversal in github.com/google/osv-scalibr
Action: Upgrade github.com/google/osv-scalibr to 0.2.1 or later.
go get github.com/google/osv-scalibr@v0.2.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.1.3 | 0.2.1 | - |
Fixed versions
| 0.2.1 |
Sources
- osv: GO-2025-3767
- https://github.com/advisories/GHSA-2hcm-q3f4-fjgw
- https://nvd.nist.gov/vuln/detail/CVE-2025-5981
- https://github.com/google/osv-scalibr/commit/2444419b1818c2d6917fc3394c947fb3276e9d59
- https://github.com/google/osv-scalibr/releases/tag/v0.1.8
CVE-2025-5981 · published · modified · JSON