{"action":"Upgrade stdlib to 1.22.12 or later.","affected":[{"fixed":"1.22.12","introduced":"0"},{"fixed":"1.23.6","introduced":"1.23.0-0"},{"introduced":"1.24.0-0"}],"component":"stdlib","cve_ids":["CVE-2025-22866"],"ecosystem":"Go","epss":0.0029,"exploited":false,"fixed_versions":["1.22.12","1.23.6","1.24.0-rc.3"],"id":"tcs_01M5KG6Z6HW6SA23HX20XKXHC3","modified_at":"2026-09-29T10:56:43.168873902Z","published_at":"2025-02-06T16:38:14Z","references":["https://osv.dev/vulnerability/GO-2025-3447","https://go.dev/cl/643735","https://go.dev/issue/71383","https://groups.google.com/g/golang-announce/c/xU1ZCHUZw3k"],"severity":{"label":"medium","score":4},"sources":[{"source":"osv","source_id":"GO-2025-3447","url":"https://osv.dev/vulnerability/GO-2025-3447"},{"source":"nvd","source_id":"CVE-2025-22866","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-22866"}],"summary":"Timing sidechannel for P-256 on ppc64le in crypto/internal/nistec"}