tocsin

CVE-2025-64186

2 advisories.

Go/github.com/evervault/evervault-go CVE-2025-64186: high 8.7, EPSS 0.15%

Evervault Go SDK: Incomplete PCR Validation in Enclave Attestation for non-Evervault hosted Enclaves

Action: Upgrade github.com/evervault/evervault-go to 1.3.2 or later.

go get github.com/evervault/evervault-go@v1.3.2

Affected

introducedfixedlast affected
01.3.2-

Fixed versions

1.3.2

Sources

CVE-2025-64186 · published · modified · JSON

Go/github.com/evervault/evervault-go CVE-2025-64186: unknown, EPSS 0.15%

Evervault Go SDK: Incomplete PCR Validation in Enclave Attestation for non-Evervault hosted Enclaves in github.com/evervault/evervault-go

Action: Upgrade github.com/evervault/evervault-go to 1.3.2 or later.

go get github.com/evervault/evervault-go@v1.3.2

Affected

introducedfixedlast affected
01.3.2-

Fixed versions

1.3.2

Sources

CVE-2025-64186 · published · modified · JSON