{"action":"Upgrade github.com/google/osv-scalibr to 0.3.4 or later.","affected":[{"fixed":"0.3.4","introduced":"0"}],"component":"github.com/google/osv-scalibr","cve_ids":["CVE-2025-13425"],"ecosystem":"Go","epss":0.00111,"exploited":false,"fixed_versions":["0.3.4"],"ghsa_id":"GHSA-f786-75f3-74xj","id":"tcs_01M5KF8K41AC0QN9TRMP5D6F8S","modified_at":"2025-11-27T08:53:08.761074Z","published_at":"2025-11-20T18:31:00Z","references":["https://osv.dev/vulnerability/GHSA-f786-75f3-74xj","https://nvd.nist.gov/vuln/detail/CVE-2025-13425","https://github.com/google/osv-scalibr/commit/e67c4e198ca099cb7c16957a80f6c5331d90a672","https://github.com/advisories/GHSA-f786-75f3-74xj","https://github.com/google/osv-scalibr"],"severity":{"label":"low","score":1.9},"sources":[{"source":"osv","source_id":"GHSA-f786-75f3-74xj","url":"https://osv.dev/vulnerability/GHSA-f786-75f3-74xj"},{"source":"nvd","source_id":"CVE-2025-13425","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-13425"}],"summary":"OSV-SCALIBR has NULL Pointer Dereference"}