tocsin

CVE-2025-6224

5 advisories.

Go/github.com/juju/utils/v4/cert CVE-2025-6224: medium 6.5

juju/utils leaks private key in certs

Action: Upgrade github.com/juju/utils/v4/cert to 4.0.4 or later.

go get github.com/juju/utils/v4/cert@v4.0.4

Affected

introducedfixedlast affected
04.0.4-

Fixed versions

4.0.4

Sources

CVE-2025-6224 · published · modified · JSON

Go/github.com/juju/utils CVE-2025-6224: unknown

Leaks private key in certs in github.com/juju/utils

Action: No fix published. Pin and monitor.

Affected

introducedfixedlast affected
0--

Fixed versions

No fixed version in the source.

Sources

CVE-2025-6224 · published · modified · JSON

Go/github.com/juju/utils/v2 CVE-2025-6224: unknown

Leaks private key in certs in github.com/juju/utils

Action: No fix published. Pin and monitor.

Affected

introducedfixedlast affected
0--

Fixed versions

No fixed version in the source.

Sources

CVE-2025-6224 · published · modified · JSON

Go/github.com/juju/utils/v3 CVE-2025-6224: unknown

Leaks private key in certs in github.com/juju/utils

Action: No fix published. Pin and monitor.

Affected

introducedfixedlast affected
0--

Fixed versions

No fixed version in the source.

Sources

CVE-2025-6224 · published · modified · JSON

Go/github.com/juju/utils/v4 CVE-2025-6224: unknown

Leaks private key in certs in github.com/juju/utils

Action: Upgrade github.com/juju/utils/v4 to 4.0.4 or later.

go get github.com/juju/utils/v4@v4.0.4

Affected

introducedfixedlast affected
04.0.4-

Fixed versions

4.0.4

Sources

CVE-2025-6224 · published · modified · JSON