{"id":"CVE-2025-47913","revision":null,"records":[{"revision":"4cd4b25cb5554f37831e47a97d3131de","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2025-47913","aliases":[],"title":"Potential denial of service in golang.org/x/crypto/ssh/agent","description":"SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process.","state":0,"publishedAt":"2025-11-13T21:29:39.907+00:00","modifiedAt":"2025-12-16T16:43:43.633+00:00","affected":[{"ecosystem":"https://pkg.go.dev","name":"golang.org/x/crypto/ssh/agent","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"golang.org/x/crypto\",\n                    \"product\": \"golang.org/x/crypto/ssh/agent\",\n                    \"collectionURL\": \"https://pkg.go.dev\",\n                    \"packageName\": \"golang.org/x/crypto/ssh/agent\",\n                    \"versions\": [\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"0.43.0\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\"\n                        }\n                    ],\n                    \"programRoutines\": [\n                        {\n                            \"name\": \"client.SignWithFlags\"\n                        },\n                        {\n                            \"name\": \"client.List\"\n                        },\n                        {\n                            \"name\": \"agentKeyringSigner.Sign\"\n                        },\n                        {\n                            \"name\": \"agentKeyringSigner.SignWithAlgorithm\"\n                        },\n                        {\n                            \"name\": \"client.Sign\"\n                        },\n                        {\n                            \"name\": \"client.Signers\"\n                        }\n                    ],\n                    \"defaultStatus\": \"unaffected\"\n                }"}],"metrics":[],"references":["https://go.dev/cl/700295","https://go.dev/issue/75178","https://github.com/advisories/GHSA-56w8-48fp-6mgv","https://pkg.go.dev/vuln/GO-2025-4116"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2025-47913","license":"CVE Program Terms of Use","key":"cve-program:CVE-2025-47913","identifiers":["CVE-2025-47913"]},"retained":false,"historicalAffected":[]},{"revision":"f865cd69406349ebabfaf71a898b38c2","observedAt":"2026-11-09T03:05:42.933+00:00","statement":{"source":"euvd","id":"EUVD-2025-177185","aliases":["CVE-2025-47913","GHSA-56w8-48fp-6mgv"],"title":"SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process.","description":"SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process.","state":0,"publishedAt":null,"modifiedAt":null,"affected":[],"metrics":[{"system":"EUVD CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","score":7.5,"severity":null}],"references":["https://go.dev/cl/700295","https://go.dev/issue/75178","https://github.com/advisories/GHSA-56w8-48fp-6mgv","https://pkg.go.dev/vuln/GO-2025-4116"],"sourceUrl":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-177185","license":"ENISA EUVD · source terms and attribution apply","enrichment":{"sourceStatus":null,"weaknesses":[],"productCriteria":[],"sourceDates":{"datePublished":"Nov 13, 2025, 9:29:39 PM","dateUpdated":"Dec 16, 2025, 4:43:43 PM"},"relatedAdvisories":[{"id":"RHSA-2025:22743","title":"Red Hat Security Advisory: Red Hat OpenShift Builds 1.6.1","vulnerabilityIds":["CVE-2025-47913","CVE-2025-58183"]},{"id":"RHSA-2026:33154","title":"Red Hat Security Advisory: Red Hat Ceph Storage","vulnerabilityIds":["CVE-2024-6345","CVE-2024-12905","CVE-2024-55565","CVE-2025-5889","CVE-2025-13465","CVE-2025-45768","CVE-2025-47913","CVE-2025-50181","CVE-2025-52555","CVE-2025-59343","CVE-2026-21441"]},{"id":"openSUSE-SU-2026:20351-1","title":"Security update for amazon-ssm-agent","vulnerabilityIds":["CVE-2025-47913"]},{"id":"openSUSE-SU-2025:20138-1","title":"Security update for act","vulnerabilityIds":["CVE-2025-47913"]},{"id":"openSUSE-SU-2026:12300-1","title":"kumactl-3.0.0-1.1 on GA media","vulnerabilityIds":["CVE-2024-45337","CVE-2024-45338","CVE-2024-51744","CVE-2025-22869","CVE-2025-22872","CVE-2025-30204","CVE-2025-47911","CVE-2025-47913","CVE-2025-47914","CVE-2025-58181","CVE-2025-58190","CVE-2026-26958","CVE-2026-33186","CVE-2026-41178"]},{"id":"SUSE-SU-2026:20357-1","title":"Security update for elemental-toolkit, elemental-operator","vulnerabilityIds":["CVE-2025-22872","CVE-2025-47911","CVE-2025-47913","CVE-2025-47914","CVE-2025-58181","CVE-2025-58190"]},{"id":"SUSE-SU-2026:20656-1","title":"Security update for docker-compose","vulnerabilityIds":["CVE-2025-47913","CVE-2025-47914","CVE-2025-62725"]},{"id":"RHSA-2026:1084","title":"Red Hat Security Advisory: podman security update","vulnerabilityIds":["CVE-2025-47907","CVE-2025-47913"]},{"id":"RHSA-2026:8325","title":"Red Hat Security Advisory: buildah, crun, podman, runc, and skopeo security update","vulnerabilityIds":["CVE-2025-31133","CVE-2025-47913","CVE-2025-52565","CVE-2025-52881","CVE-2025-58183","CVE-2025-65637"]},{"id":"SUSE-SU-2026:5067-1","title":"Security update for amazon-ssm-agent","vulnerabilityIds":["CVE-2025-47913","CVE-2025-47914","CVE-2025-58181"]},{"id":"RHSA-2026:0437","title":"Red Hat Security Advisory: buildah security update","vulnerabilityIds":["CVE-2025-47913"]},{"id":"RHSA-2025:23059","title":"Red Hat Security Advisory: Red Hat Quay 3.12","vulnerabilityIds":["CVE-2024-34156","CVE-2025-47913","CVE-2025-59420","CVE-2025-61920"]},{"id":"openSUSE-SU-2026:20132-1","title":"Security update for elemental-register, elemental-toolkit","vulnerabilityIds":["CVE-2025-22872","CVE-2025-47911","CVE-2025-47913","CVE-2025-47914","CVE-2025-58181","CVE-2025-58190"]},{"id":"RHSA-2026:16701","title":"Red Hat Security Advisory: container-tools:rhel8 security update","vulnerabilityIds":["CVE-2025-47913"]},{"id":"RHSA-2025:23176","title":"Red Hat Security Advisory: Red Hat Quay 3.13.10","vulnerabilityIds":["CVE-2024-34156","CVE-2025-47913","CVE-2025-59420","CVE-2025-61920"]},{"id":"openSUSE-SU-2026:20902-1","title":"Security update for keybase-client","vulnerabilityIds":["CVE-2025-47913","CVE-2025-47914","CVE-2025-58181","CVE-2026-26958","CVE-2026-33809","CVE-2026-39821","CVE-2026-39827","CVE-2026-39828","CVE-2026-39829","CVE-2026-39830","CVE-2026-39831","CVE-2026-39832","CVE-2026-39833","CVE-2026-39834","CVE-2026-39835","CVE-2026-42508","CVE-2026-46595","CVE-2026-46597","CVE-2026-46598"]},{"id":"RHSA-2026:12030","title":"Red Hat Security Advisory: buildah security update","vulnerabilityIds":["CVE-2025-47913","CVE-2025-61726","CVE-2025-61729","CVE-2025-68121","CVE-2026-25679"]},{"id":"SUSE-SU-2026:20976-1","title":"Security update for docker-compose","vulnerabilityIds":["CVE-2025-47913","CVE-2025-47914","CVE-2025-62725"]},{"id":"RHSA-2026:2769","title":"Red Hat Security Advisory: Red Hat Ceph Storage 7.1 security and bug fix updates","vulnerabilityIds":["CVE-2021-23358","CVE-2022-34749","CVE-2024-11831","CVE-2024-31884","CVE-2024-47866","CVE-2024-51744","CVE-2024-55565","CVE-2025-26791","CVE-2025-47913","CVE-2025-52555","CVE-2025-61729"]},{"id":"RHSA-2026:0527","title":"Red Hat Security Advisory: VolSync v0.14 security fixes and container updates","vulnerabilityIds":["CVE-2025-47913","CVE-2025-58183"]},{"id":"openSUSE-SU-2026:21244-1","title":"Security update for podman","vulnerabilityIds":["CVE-2025-22869","CVE-2025-47913","CVE-2025-47914","CVE-2025-52881","CVE-2025-6032","CVE-2025-9566","CVE-2026-34986","CVE-2026-39827","CVE-2026-39828","CVE-2026-39829","CVE-2026-39830","CVE-2026-39831","CVE-2026-39832","CVE-2026-39833","CVE-2026-39834","CVE-2026-39835","CVE-2026-42508","CVE-2026-46595","CVE-2026-46597","CVE-2026-46598"]},{"id":"SUSE-SU-2026:22451-1","title":"Security update for podman","vulnerabilityIds":["CVE-2025-22869","CVE-2025-47913","CVE-2025-47914","CVE-2025-52881","CVE-2025-6032","CVE-2025-9566","CVE-2026-34986","CVE-2026-39827","CVE-2026-39828","CVE-2026-39829","CVE-2026-39830","CVE-2026-39831","CVE-2026-39832","CVE-2026-39833","CVE-2026-39834","CVE-2026-39835","CVE-2026-42508","CVE-2026-46595","CVE-2026-46597","CVE-2026-46598"]},{"id":"SUSE-SU-2026:21756-1","title":"Security update for mcphost","vulnerabilityIds":["CVE-2025-30153","CVE-2025-47913","CVE-2025-47914","CVE-2025-58181","CVE-2026-32285","CVE-2026-33186"]},{"id":"RHSA-2026:0545","title":"Red Hat Security Advisory: podman security update","vulnerabilityIds":["CVE-2025-47913"]},{"id":"SUSE-SU-2026:20949-1","title":"Security update for docker-compose","vulnerabilityIds":["CVE-2025-47913","CVE-2025-47914","CVE-2025-62725"]},{"id":"openSUSE-SU-2026:20798-1","title":"Security update for trivy","vulnerabilityIds":["CVE-2024-3817","CVE-2024-45337","CVE-2024-45338","CVE-2024-51744","CVE-2025-11065","CVE-2025-21613","CVE-2025-21614","CVE-2025-22868","CVE-2025-22869","CVE-2025-22872","CVE-2025-27144","CVE-2025-30204","CVE-2025-46569","CVE-2025-47291","CVE-2025-47911","CVE-2025-47913","CVE-2025-47914","CVE-2025-53547","CVE-2025-58058","CVE-2025-58181","CVE-2025-58190"]},{"id":"openSUSE-SU-2025:15830-1","title":"alloy-1.12.0-2.1 on GA media","vulnerabilityIds":["CVE-2025-47911","CVE-2025-47913","CVE-2025-58190"]},{"id":"openSUSE-SU-2026:21603-1","title":"Security update for gitea-tea","vulnerabilityIds":["CVE-2024-45337","CVE-2024-45338","CVE-2025-22869","CVE-2025-22872","CVE-2025-47911","CVE-2025-47913","CVE-2025-58190"]},{"id":"SUSE-SU-2026:2468-1","title":"Security update for amazon-ssm-agent","vulnerabilityIds":["CVE-2025-22869","CVE-2025-22870","CVE-2025-47913","CVE-2026-1229","CVE-2026-25934","CVE-2026-39821","CVE-2026-39827","CVE-2026-39828","CVE-2026-39829","CVE-2026-39830","CVE-2026-39831","CVE-2026-39832","CVE-2026-39833","CVE-2026-39834","CVE-2026-39835","CVE-2026-41506","CVE-2026-42508","CVE-2026-44740","CVE-2026-46595","CVE-2026-46597","CVE-2026-46598"]},{"id":"SUSE-SU-2026:20451-1","title":"Security update for docker-compose","vulnerabilityIds":["CVE-2025-47913","CVE-2025-47914"]},{"id":"SUSE-SU-2026:20089-1","title":"Security update for alloy","vulnerabilityIds":["CVE-2025-47911","CVE-2025-47913","CVE-2025-58190"]},{"id":"RHSA-2026:10703","title":"Red Hat Security Advisory: container-tools:rhel8 security update","vulnerabilityIds":["CVE-2025-31133","CVE-2025-47913","CVE-2025-52565","CVE-2025-52881","CVE-2025-58183","CVE-2025-65637"]},{"id":"SUSE-SU-2026:20123-1","title":"Security update for buildah","vulnerabilityIds":["CVE-2025-31133","CVE-2025-47913","CVE-2025-47914","CVE-2025-52565","CVE-2025-52881"]},{"id":"RHSA-2026:0753","title":"Red Hat Security Advisory: container-tools:rhel8 security update","vulnerabilityIds":["CVE-2025-47913"]},{"id":"SUSE-SU-2026:20626-1","title":"Security update for podman","vulnerabilityIds":["CVE-2025-22869","CVE-2025-31133","CVE-2025-47913","CVE-2025-47914","CVE-2025-52565","CVE-2025-52881","CVE-2025-6032","CVE-2025-9566"]},{"id":"msrc_CVE-2025-47913","title":"Potential denial of service in golang.org/x/crypto/ssh/agent","vulnerabilityIds":["CVE-2025-47913"]},{"id":"SUSE-SU-2026:24378-1","title":"Security update for podman","vulnerabilityIds":["CVE-2025-22869","CVE-2025-47913","CVE-2025-47914","CVE-2025-52881","CVE-2025-6032","CVE-2025-9566","CVE-2026-34986","CVE-2026-39829","CVE-2026-39830","CVE-2026-42508","CVE-2026-55686","CVE-2026-57231"]},{"id":"openSUSE-SU-2025:15771-1","title":"git-bug-0.10.1-3.1 on GA media","vulnerabilityIds":["CVE-2025-47913","CVE-2025-47914","CVE-2025-58181"]},{"id":"RHSA-2026:26411","title":"Red Hat Security Advisory: New container image: rhceph-9.0","vulnerabilityIds":["CVE-2024-55565","CVE-2025-47913","CVE-2025-47914","CVE-2025-58181","CVE-2025-59343","CVE-2025-64718","CVE-2025-64756"]},{"id":"openSUSE-SU-2026:12295-1","title":"k3sup-0.13.14-1.1 on GA media","vulnerabilityIds":["CVE-2024-45337","CVE-2025-22869","CVE-2025-47913","CVE-2025-47914","CVE-2025-58181"]},{"id":"RHSA-2025:23060","title":"Red Hat Security Advisory: Red Hat Quay 3.12","vulnerabilityIds":["CVE-2024-34156","CVE-2025-47913","CVE-2025-59420","CVE-2025-61920"]},{"id":"openSUSE-SU-2026:10042-1","title":"mcphost-0.32.0-1.1 on GA media","vulnerabilityIds":["CVE-2025-47913","CVE-2025-47914","CVE-2025-58181"]},{"id":"openSUSE-SU-2026:20080-1","title":"Security update for buildah","vulnerabilityIds":["CVE-2025-31133","CVE-2025-47913","CVE-2025-47914","CVE-2025-52565","CVE-2025-52881"]},{"id":"SUSE-SU-2025:4229-1","title":"Security update for buildah","vulnerabilityIds":["CVE-2025-47913"]},{"id":"RHSA-2026:14868","title":"Red Hat Security Advisory: buildah security update","vulnerabilityIds":["CVE-2025-47913","CVE-2025-61726","CVE-2025-61729","CVE-2025-68121","CVE-2026-25679"]},{"id":"RHSA-2026:16102","title":"Red Hat Security Advisory: buildah security update","vulnerabilityIds":["CVE-2025-47913","CVE-2025-61726","CVE-2025-61729","CVE-2025-68121","CVE-2026-25679","CVE-2026-32283"]},{"id":"RHSA-2025:23028","title":"Red Hat Security Advisory: Red Hat Quay 3.12","vulnerabilityIds":["CVE-2024-34156","CVE-2025-47913","CVE-2025-59420","CVE-2025-61920"]},{"id":"openSUSE-SU-2026:20730-1","title":"Security update for apptainer","vulnerabilityIds":["CVE-2023-45288","CVE-2024-28180","CVE-2024-3727","CVE-2024-41110","CVE-2024-45337","CVE-2024-45338","CVE-2025-22869","CVE-2025-22870","CVE-2025-22872","CVE-2025-27144","CVE-2025-47911","CVE-2025-47913","CVE-2025-47914","CVE-2025-58181","CVE-2025-58190","CVE-2025-65105","CVE-2025-8556","CVE-2026-24137","CVE-2026-33186","CVE-2026-34986"]},{"id":"SUSE-SU-2026:22157-1","title":"Security update for amazon-ssm-agent","vulnerabilityIds":["CVE-2025-22869","CVE-2025-22870","CVE-2025-47913","CVE-2026-1229","CVE-2026-25934","CVE-2026-39821","CVE-2026-39827","CVE-2026-39828","CVE-2026-39829","CVE-2026-39830","CVE-2026-39831","CVE-2026-39832","CVE-2026-39833","CVE-2026-39834","CVE-2026-39835","CVE-2026-41506","CVE-2026-42508","CVE-2026-44740","CVE-2026-46595","CVE-2026-46597","CVE-2026-46598"]},{"id":"RHSA-2026:4215","title":"Red Hat Security Advisory: Red Hat Quay 3.14.6","vulnerabilityIds":["CVE-2022-30187","CVE-2024-34156","CVE-2024-47081","CVE-2025-12816","CVE-2025-15284","CVE-2025-45768","CVE-2025-47273","CVE-2025-47913","CVE-2025-50181","CVE-2025-52881","CVE-2025-58183","CVE-2025-58754","CVE-2025-59420","CVE-2025-61729","CVE-2025-61920","CVE-2025-65945","CVE-2025-66418","CVE-2025-66471","CVE-2025-66506","CVE-2026-21441","CVE-2026-24049"]},{"id":"RHSA-2026:2737","title":"Red Hat Security Advisory: Red Hat Ceph Storage","vulnerabilityIds":["CVE-2019-10790","CVE-2021-23358","CVE-2022-34749","CVE-2024-31884","CVE-2024-51744","CVE-2024-55565","CVE-2025-6176","CVE-2025-7783","CVE-2025-12816","CVE-2025-14104","CVE-2025-26791","CVE-2025-47907","CVE-2025-47913","CVE-2025-58183","CVE-2025-66031","CVE-2025-66418","CVE-2025-66471","CVE-2025-68429"]},{"id":"SUSE-SU-2026:0439-1","title":"Security update for apptainer","vulnerabilityIds":["CVE-2024-45310","CVE-2025-22869","CVE-2025-22870","CVE-2025-22872","CVE-2025-27144","CVE-2025-47913","CVE-2025-47914","CVE-2025-58181","CVE-2025-65105","CVE-2025-8556"]},{"id":"openSUSE-SU-2025:15752-1","title":"act-0.2.82-2.1 on GA media","vulnerabilityIds":["CVE-2025-47913"]},{"id":"openSUSE-SU-2026:20044-1","title":"Security update for alloy","vulnerabilityIds":["CVE-2025-47911","CVE-2025-47913","CVE-2025-58190"]},{"id":"RHSA-2026:82322","title":"Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.17.2","vulnerabilityIds":["CVE-2024-34459","CVE-2025-5278","CVE-2025-6170","CVE-2025-13151","CVE-2025-14087","CVE-2025-14512","CVE-2025-47911","CVE-2025-47913","CVE-2025-47914","CVE-2025-58181","CVE-2025-58190","CVE-2026-1965","CVE-2026-2100","CVE-2026-2673","CVE-2026-3783","CVE-2026-3832","CVE-2026-3833","CVE-2026-4046","CVE-2026-4424","CVE-2026-4437","CVE-2026-4438","CVE-2026-4878","CVE-2026-5121","CVE-2026-5260","CVE-2026-5419","CVE-2026-5435","CVE-2026-5450","CVE-2026-5928","CVE-2026-6238","CVE-2026-6653","CVE-2026-7383","CVE-2026-8286","CVE-2026-9076","CVE-2026-9547","CVE-2026-11822","CVE-2026-11824","CVE-2026-11979","CVE-2026-13757","CVE-2026-14164","CVE-2026-15588","CVE-2026-16118","CVE-2026-25680","CVE-2026-25681","CVE-2026-27135","CVE-2026-27136","CVE-2026-28390","CVE-2026-29111","CVE-2026-29181","CVE-2026-31790","CVE-2026-33186","CVE-2026-33845","CVE-2026-33846","CVE-2026-34180","CVE-2026-34181","CVE-2026-34182","CVE-2026-34183","CVE-2026-39827","CVE-2026-39828","CVE-2026-39829","CVE-2026-39830","CVE-2026-39831","CVE-2026-39832","CVE-2026-39833","CVE-2026-39834","CVE-2026-39835","CVE-2026-40355","CVE-2026-40356","CVE-2026-41989","CVE-2026-42009","CVE-2026-42010","CVE-2026-42011","CVE-2026-42012","CVE-2026-42013","CVE-2026-42014","CVE-2026-42015","CVE-2026-42502","CVE-2026-42506","CVE-2026-42508","CVE-2026-42764","CVE-2026-42766","CVE-2026-42767","CVE-2026-42768","CVE-2026-42769","CVE-2026-42770","CVE-2026-45445","CVE-2026-45446","CVE-2026-45447","CVE-2026-46595","CVE-2026-46597","CVE-2026-46598","CVE-2026-46600","CVE-2026-48864","CVE-2026-54369","CVE-2026-54370","CVE-2026-54371","CVE-2026-56854","CVE-2026-56855","CVE-2026-58010","CVE-2026-58011","CVE-2026-58012","CVE-2026-58013","CVE-2026-58014","CVE-2026-58015","CVE-2026-58016","CVE-2026-58055","CVE-2026-78662","CVE-2026-84304","CVE-2026-84445"]},{"id":"SUSE-SU-2026:20035-1","title":"Security update for podman","vulnerabilityIds":["CVE-2025-47913","CVE-2025-47914"]},{"id":"RHSA-2026:2454","title":"Red Hat Security Advisory: DevWorkspace Operator 0.39.0 release.","vulnerabilityIds":["CVE-2025-47913","CVE-2025-61729"]},{"id":"RHSA-2026:13431","title":"Red Hat Security Advisory: OpenShift Virtualization v4.14 Images","vulnerabilityIds":["CVE-2025-47913"]},{"id":"RHSA-2026:5222","title":"Red Hat Security Advisory: podman security update","vulnerabilityIds":["CVE-2025-47913"]},{"id":"RHSA-2026:1018","title":"Red Hat Security Advisory: Red Hat OpenShift GitOps v1.17.4 security update","vulnerabilityIds":["CVE-2025-47913","CVE-2025-55190","CVE-2025-58183","CVE-2025-58754","CVE-2025-61729","CVE-2025-68156"]},{"id":"SUSE-SU-2026:20641-1","title":"Security update for podman","vulnerabilityIds":["CVE-2025-22869","CVE-2025-31133","CVE-2025-47913","CVE-2025-47914","CVE-2025-52565","CVE-2025-52881","CVE-2025-6032","CVE-2025-9566"]},{"id":"SUSE-SU-2025:4156-1","title":"Security update for podman","vulnerabilityIds":["CVE-2025-47913"]},{"id":"RHSA-2026:1942","title":"Red Hat Security Advisory: Red Hat Quay 3.15.3","vulnerabilityIds":["CVE-2024-34156","CVE-2025-12816","CVE-2025-15284","CVE-2025-47907","CVE-2025-47913","CVE-2025-52881","CVE-2025-58183","CVE-2025-58754","CVE-2025-59420","CVE-2025-61729","CVE-2025-65945","CVE-2025-66418","CVE-2025-66471","CVE-2025-66506","CVE-2026-21441","CVE-2026-24049"]},{"id":"RHSA-2026:4532","title":"Red Hat Security Advisory: buildah security update","vulnerabilityIds":["CVE-2025-47913","CVE-2025-52881","CVE-2025-58183","CVE-2025-65637"]},{"id":"RHSA-2026:4693","title":"Red Hat Security Advisory: container-tools:rhel8 security update","vulnerabilityIds":["CVE-2024-45336","CVE-2025-22866","CVE-2025-31133","CVE-2025-47913","CVE-2025-52565","CVE-2025-52881","CVE-2025-58183","CVE-2025-65637"]},{"id":"openSUSE-SU-2026:10013-1","title":"apptainer-1.4.5-1.1 on GA media","vulnerabilityIds":["CVE-2025-22872","CVE-2025-47913","CVE-2025-47914","CVE-2025-58181","CVE-2025-65105","CVE-2025-8556"]},{"id":"RHSA-2026:2136","title":"Red Hat Security Advisory: RHTAS 1.3.2 - Red Hat Trusted Artifact Signer Release","vulnerabilityIds":["CVE-2025-47913","CVE-2025-61729","CVE-2025-66506","CVE-2026-22772"]},{"id":"SUSE-SU-2026:0028-1","title":"Security update for alloy","vulnerabilityIds":["CVE-2025-47911","CVE-2025-47913","CVE-2025-58190"]},{"id":"RHSA-2026:3827","title":"Red Hat Security Advisory: Red Hat OpenShift Pipelines Release 1.20.3","vulnerabilityIds":["CVE-2025-11621","CVE-2025-12044","CVE-2025-47913","CVE-2025-61729","CVE-2025-66506","CVE-2025-66564"]},{"id":"RHSA-2026:1017","title":"Red Hat Security Advisory: Red Hat OpenShift GitOps v1.18.3 security update","vulnerabilityIds":["CVE-2025-13888","CVE-2025-47913","CVE-2025-55190","CVE-2025-58183","CVE-2025-61729","CVE-2025-68156"]},{"id":"openSUSE-SU-2025:15852-1","title":"trivy-0.68.2-1.1 on GA media","vulnerabilityIds":["CVE-2025-47911","CVE-2025-47913","CVE-2025-47914","CVE-2025-58190"]},{"id":"RHSA-2025:22955","title":"Red Hat Security Advisory: Red Hat OpenStack Platform 17.1.12 director Operator container images","vulnerabilityIds":["CVE-2024-25621","CVE-2025-47913"]},{"id":"SUSE-SU-2025:4157-1","title":"Security update for podman","vulnerabilityIds":["CVE-2025-47913"]},{"id":"RHSA-2026:20880","title":"Red Hat Security Advisory: OpenShift Virtualization v4.16 Images","vulnerabilityIds":["CVE-2025-47913"]},{"id":"SUSE-SU-2026:22516-1","title":"Security update for podman","vulnerabilityIds":["CVE-2024-6104","CVE-2025-22869","CVE-2025-27144","CVE-2025-47913","CVE-2025-47914","CVE-2025-52881","CVE-2025-6032","CVE-2025-9566","CVE-2026-34986","CVE-2026-39827","CVE-2026-39828","CVE-2026-39829","CVE-2026-39830","CVE-2026-39831","CVE-2026-39832","CVE-2026-39833","CVE-2026-39834","CVE-2026-39835","CVE-2026-42508","CVE-2026-46595","CVE-2026-46597","CVE-2026-46598"]},{"id":"RHSA-2026:82354","title":"Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.18.2","vulnerabilityIds":["CVE-2024-34459","CVE-2025-5278","CVE-2025-6170","CVE-2025-9086","CVE-2025-9820","CVE-2025-11187","CVE-2025-13151","CVE-2025-14087","CVE-2025-14104","CVE-2025-14512","CVE-2025-14831","CVE-2025-15281","CVE-2025-15467","CVE-2025-15468","CVE-2025-15469","CVE-2025-47911","CVE-2025-47913","CVE-2025-47914","CVE-2025-58181","CVE-2025-58190","CVE-2025-61726","CVE-2025-61728","CVE-2025-61730","CVE-2025-66199","CVE-2025-68121","CVE-2025-68160","CVE-2025-69418","CVE-2025-69419","CVE-2025-69420","CVE-2025-69421","CVE-2026-0861","CVE-2026-0915","CVE-2026-1965","CVE-2026-2100","CVE-2026-2673","CVE-2026-3783","CVE-2026-3832","CVE-2026-3833","CVE-2026-4046","CVE-2026-4111","CVE-2026-4424","CVE-2026-4437","CVE-2026-4438","CVE-2026-4878","CVE-2026-5121","CVE-2026-5260","CVE-2026-5419","CVE-2026-5435","CVE-2026-5450","CVE-2026-5928","CVE-2026-6238","CVE-2026-6653","CVE-2026-7383","CVE-2026-8286","CVE-2026-9076","CVE-2026-9547","CVE-2026-11822","CVE-2026-11824","CVE-2026-11979","CVE-2026-13757","CVE-2026-14164","CVE-2026-15588","CVE-2026-16118","CVE-2026-22795","CVE-2026-22796","CVE-2026-25679","CVE-2026-25681","CVE-2026-27135","CVE-2026-27136","CVE-2026-27145","CVE-2026-28390","CVE-2026-29111","CVE-2026-31790","CVE-2026-32280","CVE-2026-32281","CVE-2026-32283","CVE-2026-33186","CVE-2026-33811","CVE-2026-33814","CVE-2026-33818","CVE-2026-33845","CVE-2026-33846","CVE-2026-34180","CVE-2026-34181","CVE-2026-34182","CVE-2026-34183","CVE-2026-34986","CVE-2026-39820","CVE-2026-39822","CVE-2026-40355","CVE-2026-40356","CVE-2026-41989","CVE-2026-42009","CVE-2026-42010","CVE-2026-42011","CVE-2026-42012","CVE-2026-42013","CVE-2026-42014","CVE-2026-42015","CVE-2026-42499","CVE-2026-42504","CVE-2026-42764","CVE-2026-42766","CVE-2026-42767","CVE-2026-42768","CVE-2026-42769","CVE-2026-42770","CVE-2026-45445","CVE-2026-45446","CVE-2026-45447","CVE-2026-48864","CVE-2026-54369","CVE-2026-54370","CVE-2026-54371","CVE-2026-56858","CVE-2026-56859","CVE-2026-56860","CVE-2026-56862","CVE-2026-58010","CVE-2026-58011","CVE-2026-58012","CVE-2026-58013","CVE-2026-58014","CVE-2026-58015","CVE-2026-58016","CVE-2026-58055"]},{"id":"RHSA-2026:82304","title":"Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.17.2","vulnerabilityIds":["CVE-2024-34459","CVE-2025-5278","CVE-2025-6170","CVE-2025-13151","CVE-2025-14087","CVE-2025-14512","CVE-2025-47911","CVE-2025-47913","CVE-2025-47914","CVE-2025-58181","CVE-2025-58190","CVE-2026-1965","CVE-2026-2100","CVE-2026-2673","CVE-2026-3783","CVE-2026-3832","CVE-2026-3833","CVE-2026-4046","CVE-2026-4424","CVE-2026-4437","CVE-2026-4438","CVE-2026-4878","CVE-2026-5121","CVE-2026-5260","CVE-2026-5419","CVE-2026-5435","CVE-2026-5450","CVE-2026-5928","CVE-2026-6238","CVE-2026-6653","CVE-2026-7383","CVE-2026-8286","CVE-2026-9076","CVE-2026-9547","CVE-2026-11822","CVE-2026-11824","CVE-2026-11979","CVE-2026-13757","CVE-2026-14164","CVE-2026-15588","CVE-2026-16118","CVE-2026-25680","CVE-2026-25681","CVE-2026-27135","CVE-2026-27136","CVE-2026-28390","CVE-2026-29111","CVE-2026-31790","CVE-2026-33186","CVE-2026-33845","CVE-2026-33846","CVE-2026-34180","CVE-2026-34181","CVE-2026-34182","CVE-2026-34183","CVE-2026-34986","CVE-2026-39827","CVE-2026-39828","CVE-2026-39829","CVE-2026-39830","CVE-2026-39831","CVE-2026-39832","CVE-2026-39833","CVE-2026-39834","CVE-2026-39835","CVE-2026-40355","CVE-2026-40356","CVE-2026-41989","CVE-2026-42009","CVE-2026-42010","CVE-2026-42011","CVE-2026-42012","CVE-2026-42013","CVE-2026-42014","CVE-2026-42015","CVE-2026-42502","CVE-2026-42506","CVE-2026-42508","CVE-2026-42764","CVE-2026-42766","CVE-2026-42767","CVE-2026-42768","CVE-2026-42769","CVE-2026-42770","CVE-2026-45445","CVE-2026-45446","CVE-2026-45447","CVE-2026-46595","CVE-2026-46597","CVE-2026-46598","CVE-2026-46600","CVE-2026-48864","CVE-2026-54369","CVE-2026-54370","CVE-2026-54371","CVE-2026-56854","CVE-2026-56855","CVE-2026-58010","CVE-2026-58011","CVE-2026-58012","CVE-2026-58013","CVE-2026-58014","CVE-2026-58015","CVE-2026-58016","CVE-2026-58055","CVE-2026-78662","CVE-2026-84304","CVE-2026-84445"]},{"id":"RHSA-2025:23531","title":"Red Hat Security Advisory: RHOAI 2.25.1 - Red Hat OpenShift AI","vulnerabilityIds":["CVE-2025-9905","CVE-2025-9906","CVE-2025-12060","CVE-2025-12638","CVE-2025-47913","CVE-2025-49655","CVE-2025-53643","CVE-2025-62164","CVE-2025-62593","CVE-2025-62727","CVE-2025-64756","CVE-2025-66416"]},{"id":"openSUSE-SU-2025:15773-1","title":"cheat-4.4.2-3.1 on GA media","vulnerabilityIds":["CVE-2025-47913","CVE-2025-47914","CVE-2025-58181"]},{"id":"RHSA-2026:13630","title":"Red Hat Security Advisory: OpenShift Virtualization v4.20 Images","vulnerabilityIds":["CVE-2025-47913"]},{"id":"SUSE-SU-2025:4526-1","title":"Security update for buildah","vulnerabilityIds":["CVE-2025-47913","CVE-2025-47914"]},{"id":"RHSA-2025:23064","title":"Red Hat Security Advisory: Red Hat Quay 3.10.17","vulnerabilityIds":["CVE-2024-34156","CVE-2024-45337","CVE-2024-45338","CVE-2025-47913","CVE-2025-59420","CVE-2025-61920"]},{"id":"openSUSE-RU-2026:20010-1","title":"Recommended update for trivy","vulnerabilityIds":["CVE-2025-47911","CVE-2025-47913","CVE-2025-47914","CVE-2025-58181","CVE-2025-58190"]},{"id":"RHSA-2026:6503","title":"Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.20.9 security, enhancement & bug fix update","vulnerabilityIds":["CVE-2024-5042","CVE-2025-22870","CVE-2025-47913","CVE-2025-47914","CVE-2025-58181"]},{"id":"SUSE-SU-2026:20176-1","title":"Security update for elemental-register, elemental-toolkit","vulnerabilityIds":["CVE-2025-22872","CVE-2025-47911","CVE-2025-47913","CVE-2025-47914","CVE-2025-58181","CVE-2025-58190"]},{"id":"SUSE-SU-2026:20244-1","title":"Security update for elemental-toolkit, elemental-operator","vulnerabilityIds":["CVE-2025-22872","CVE-2025-47911","CVE-2025-47913","CVE-2025-47914","CVE-2025-58181","CVE-2025-58190"]},{"id":"openSUSE-SU-2026:21824-1","title":"Security update for containerized-data-importer1.65","vulnerabilityIds":["CVE-2025-22869","CVE-2025-22870","CVE-2025-22872","CVE-2025-47911","CVE-2025-47913","CVE-2025-47914","CVE-2025-58058","CVE-2025-58181","CVE-2025-58190","CVE-2026-25680","CVE-2026-25681","CVE-2026-27136","CVE-2026-33186","CVE-2026-33814","CVE-2026-34986","CVE-2026-35469","CVE-2026-39821","CVE-2026-39827","CVE-2026-39828","CVE-2026-39829","CVE-2026-39830","CVE-2026-39831","CVE-2026-39832","CVE-2026-39833","CVE-2026-39834","CVE-2026-39835","CVE-2026-41178","CVE-2026-42502","CVE-2026-42506","CVE-2026-42508","CVE-2026-46595","CVE-2026-46597","CVE-2026-46598","CVE-2026-56852","CVE-2026-56854","CVE-2026-56855","CVE-2026-78662","CVE-2026-84303","CVE-2026-84304"]},{"id":"SUSE-SU-2026:0014-1","title":"Security update for buildah","vulnerabilityIds":["CVE-2025-47913","CVE-2025-47914"]},{"id":"SUSE-SU-2025:4191-1","title":"Security update for amazon-ssm-agent","vulnerabilityIds":["CVE-2025-47913"]},{"id":"RHSA-2026:2922","title":"Red Hat Security Advisory: RHTAS 1.2.2 - Red Hat Trusted Artifact Signer Release","vulnerabilityIds":["CVE-2025-47913","CVE-2025-61729","CVE-2025-65945","CVE-2025-66506","CVE-2026-22772"]},{"id":"RHSA-2026:19634","title":"Red Hat Security Advisory: container-tools:rhel8 security update","vulnerabilityIds":["CVE-2025-47913","CVE-2025-61726","CVE-2025-61729","CVE-2025-68121","CVE-2026-25679","CVE-2026-32280","CVE-2026-32283"]},{"id":"openSUSE-SU-2026:11781-1","title":"rz-pm-0.3.6-1.1 on GA media","vulnerabilityIds":["CVE-2025-47913","CVE-2025-47914","CVE-2025-58181"]},{"id":"RHSA-2026:53770","title":"Red Hat Security Advisory: OpenShift Virtualization v4.20 Images","vulnerabilityIds":["CVE-2025-47913"]},{"id":"WID-SEC-W-2025-2608","title":"Golang Go: Schwachstelle ermöglicht Denial of Service","vulnerabilityIds":["CVE-2025-47913"]},{"id":"RHSA-2026:43692","title":"Red Hat Security Advisory: Red Hat OpenShift API for Data Protection","vulnerabilityIds":["CVE-2025-47911","CVE-2025-47913","CVE-2025-47914","CVE-2025-58181","CVE-2025-58190","CVE-2026-25680","CVE-2026-25681","CVE-2026-27136","CVE-2026-33186","CVE-2026-33811","CVE-2026-33814","CVE-2026-39817","CVE-2026-39820","CVE-2026-39821","CVE-2026-39823","CVE-2026-39825","CVE-2026-39826","CVE-2026-39827","CVE-2026-39828","CVE-2026-39829","CVE-2026-39830","CVE-2026-39831","CVE-2026-39832","CVE-2026-39833","CVE-2026-39834","CVE-2026-39835","CVE-2026-40356","CVE-2026-42499","CVE-2026-42502","CVE-2026-42506","CVE-2026-42508","CVE-2026-46595","CVE-2026-46597","CVE-2026-46598"]},{"id":"SUSE-SU-2025:4245-1","title":"Security update for buildah","vulnerabilityIds":["CVE-2025-47913"]},{"id":"RHSA-2026:5167","title":"Red Hat Security Advisory: podman security update","vulnerabilityIds":["CVE-2025-47913"]},{"id":"openSUSE-SU-2026:20305-1","title":"Security update for podman","vulnerabilityIds":["CVE-2025-22869","CVE-2025-31133","CVE-2025-47913","CVE-2025-47914","CVE-2025-52565","CVE-2025-52881","CVE-2025-6032","CVE-2025-9566"]},{"id":"RHSA-2025:23546","title":"Red Hat Security Advisory: Red Hat Quay 3.16.0","vulnerabilityIds":["CVE-2024-34156","CVE-2025-47913","CVE-2025-58183","CVE-2025-58754"]},{"id":"openSUSE-SU-2026:20438-1","title":"Security update for docker-compose","vulnerabilityIds":["CVE-2025-47913","CVE-2025-47914","CVE-2025-62725"]},{"id":"RHSA-2025:23061","title":"Red Hat Security Advisory: Red Hat Quay 3.9.17","vulnerabilityIds":["CVE-2024-34156","CVE-2024-45337","CVE-2024-45338","CVE-2025-47913","CVE-2025-59420","CVE-2025-61920"]},{"id":"openSUSE-SU-2026:21079-1","title":"Security update for amazon-ssm-agent","vulnerabilityIds":["CVE-2025-22869","CVE-2025-22870","CVE-2025-47913","CVE-2026-1229","CVE-2026-25934","CVE-2026-39821","CVE-2026-39827","CVE-2026-39828","CVE-2026-39829","CVE-2026-39830","CVE-2026-39831","CVE-2026-39832","CVE-2026-39833","CVE-2026-39834","CVE-2026-39835","CVE-2026-41506","CVE-2026-42508","CVE-2026-44740","CVE-2026-46595","CVE-2026-46597","CVE-2026-46598"]},{"id":"RHSA-2026:11749","title":"Red Hat Security Advisory: buildah security update","vulnerabilityIds":["CVE-2025-47913","CVE-2025-61726","CVE-2025-61729","CVE-2025-68121","CVE-2026-25679"]},{"id":"openSUSE-SU-2026:20788-1","title":"Security update for mcphost","vulnerabilityIds":["CVE-2025-30153","CVE-2025-47913","CVE-2025-47914","CVE-2025-58181","CVE-2026-32285","CVE-2026-33186"]},{"id":"SUSE-SU-2025:4244-1","title":"Security update for amazon-ssm-agent","vulnerabilityIds":["CVE-2025-47913"]},{"id":"openSUSE-SU-2025:20143-1","title":"Security update for git-bug","vulnerabilityIds":["CVE-2024-45337","CVE-2025-22869","CVE-2025-47911","CVE-2025-47913","CVE-2025-47914","CVE-2025-58181","CVE-2025-58190"]},{"id":"openSUSE-SU-2025:20177-1","title":"Security update for cheat","vulnerabilityIds":["CVE-2023-48795","CVE-2025-21613","CVE-2025-21614","CVE-2025-22869","CVE-2025-22870","CVE-2025-47913","CVE-2025-47914","CVE-2025-58181"]},{"id":"SUSE-SU-2026:21291-1","title":"Security update for podman","vulnerabilityIds":["CVE-2025-31133","CVE-2025-47913","CVE-2025-47914","CVE-2025-52565","CVE-2025-52881"]},{"id":"RHSA-2026:0436","title":"Red Hat Security Advisory: buildah security update","vulnerabilityIds":["CVE-2025-47913"]},{"id":"RHSA-2026:3122","title":"Red Hat Security Advisory: Red Hat OpenStack Platform 16.2 director Operator container images","vulnerabilityIds":["CVE-2024-25621","CVE-2025-47913"]},{"id":"RHSA-2026:16702","title":"Red Hat Security Advisory: podman security update","vulnerabilityIds":["CVE-2025-47913"]},{"id":"SUSE-SU-2025:4274-1","title":"Security update for buildah","vulnerabilityIds":["CVE-2025-47913"]},{"id":"openSUSE-SU-2025:15744-1","title":"amazon-ssm-agent-3.3.3270.0-2.1 on GA media","vulnerabilityIds":["CVE-2025-47913"]},{"id":"SUSE-SU-2026:21827-1","title":"Security update for mcphost","vulnerabilityIds":["CVE-2025-30153","CVE-2025-47913","CVE-2025-47914","CVE-2025-58181","CVE-2026-32285","CVE-2026-33186"]},{"id":"RHSA-2026:13450","title":"Red Hat Security Advisory: OpenShift Virtualization v4.19 Images","vulnerabilityIds":["CVE-2025-47913"]},{"id":"SUSE-SU-2025:4185-1","title":"Security update for podman","vulnerabilityIds":["CVE-2025-47913"]},{"id":"RHSA-2026:0470","title":"Red Hat Security Advisory: podman security update","vulnerabilityIds":["CVE-2025-47913"]}],"note":"EUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON."},"key":"euvd:EUVD-2025-177185","identifiers":["EUVD-2025-177185","CVE-2025-47913","GHSA-56w8-48fp-6mgv"]},"retained":false,"historicalAffected":[]},{"revision":"0de4a40f63164d859081467484e889f1","observedAt":"2026-10-25T02:24:54.05+00:00","statement":{"source":"nvd","id":"CVE-2025-47913","aliases":[],"title":"SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process.","description":"SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process.","state":0,"publishedAt":"2025-11-13T22:15:51.28+00:00","modifiedAt":"2026-10-18T20:10:00.11+00:00","affected":[],"metrics":[{"system":"CVSS 3.1 · 134c704f-9b21-4f2e-91b3-4a467353bcc0 · Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","score":7.5,"severity":"HIGH"}],"references":["https://github.com/advisories/GHSA-56w8-48fp-6mgv","https://go.dev/cl/700295","https://go.dev/issue/75178","https://pkg.go.dev/vuln/GO-2025-4116"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-47913","license":"NIST NVD usage terms; underlying source attribution retained","enrichment":{"sourceStatus":"Analyzed","weaknesses":["CWE-617"],"productCriteria":["cpe:2.3:a:go:ssh:*:*:*:*:*:go:*:*"],"sourceDates":{"published":"2025-11-13T22:15:51.280","lastModified":"2026-10-18T20:10:00.110"},"relatedAdvisories":[],"note":"NVD analysis and CPE criteria are source context, not proof that a package or your environment is affected. Complete affected data, logical configurations and SSVC are retained in the original JSON."},"key":"nvd:CVE-2025-47913","identifiers":["CVE-2025-47913"]},"retained":false,"historicalAffected":[]},{"revision":"d0d3b742af464b9db6e46e901fae9b6f","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GHSA-56w8-48fp-6mgv","aliases":["CVE-2025-47913","GO-2025-4116"],"title":"golang.org/x/crypto/ssh/agent has a potential denial of service","description":"SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process.","state":0,"publishedAt":"2025-11-14T00:30:27+00:00","modifiedAt":"2026-09-10T03:50:30.5481992+00:00","affected":[{"ecosystem":"Go","name":"golang.org/x/crypto/ssh/agent","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"},{"kind":"fixed","version":"0.43.0"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[{"system":"CVSS_V3","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","score":null,"severity":null},{"system":"Publisher rating","vector":null,"score":null,"severity":"HIGH"}],"references":["https://nvd.nist.gov/vuln/detail/CVE-2025-47913","https://github.com/golang/crypto","https://go.dev/cl/700295","https://go.dev/issue/75178","https://pkg.go.dev/vuln/GO-2025-4116"],"sourceUrl":"https://github.com/advisories/GHSA-56w8-48fp-6mgv","license":"GitHub Advisory Database · CC-BY-4.0","key":"osv:GHSA-56w8-48fp-6mgv","identifiers":["GHSA-56w8-48fp-6mgv","CVE-2025-47913","GO-2025-4116"]},"retained":false,"historicalAffected":[]},{"revision":"cb3df68e6a704438851f94156c851be5","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GO-2025-4116","aliases":["CVE-2025-47913","GHSA-56w8-48fp-6mgv"],"title":"Potential denial of service in golang.org/x/crypto/ssh/agent","description":"SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process.","state":0,"publishedAt":"2025-11-13T21:12:03+00:00","modifiedAt":"2026-05-21T10:29:29.7998853+00:00","affected":[{"ecosystem":"Go","name":"golang.org/x/crypto","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"},{"kind":"fixed","version":"0.43.0"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://go.dev/cl/700295","https://go.dev/issue/75178","https://github.com/advisories/GHSA-56w8-48fp-6mgv"],"sourceUrl":"https://osv.dev/vulnerability/GO-2025-4116","license":"OSV · upstream source license applies","key":"osv:GO-2025-4116","identifiers":["GO-2025-4116","CVE-2025-47913","GHSA-56w8-48fp-6mgv"]},"retained":false,"historicalAffected":[]}],"coverage":[{"source":"cisa-kev:global","scope":"Complete CISA KEV catalog; all vendors. Missing entries do not establish absence of exploitation.","generation":"2026-11-09T06:02:15.5744295+00:00","complete":true,"records":1769,"lastAttemptAt":"2026-11-09T06:02:15.5744295+00:00","lastSuccessAt":"2026-11-09T06:02:15.8100724+00:00","error":null,"lastVerifiedAt":"2026-11-09T06:02:15.8100756+00:00","snapshotPublishedAt":null,"importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"cve-program","scope":"Official CVE Program baseline and cumulative hourly delta; all vendors, published and rejected records","generation":"cve-24e6fde7b744113daefb8f6135035fb8a5c69c9617c9c0d40574a0376532ffd3-61bf15172f364246efc204ad9b25e3f89710939e13c23b3efb3d009b5fdad808","complete":true,"records":421290,"lastAttemptAt":"2026-11-09T06:02:14.4940664+00:00","lastSuccessAt":"2026-11-09T05:02:14.5253969+00:00","error":"HttpRequestException","lastVerifiedAt":"2026-11-09T05:02:14.5383867+00:00","snapshotPublishedAt":"2026-11-09T04:29:38+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"euvd","scope":"Rolling EUVD lookups of CVE aliases in current public OSV archives; 500 identifiers per refresh, rechecked after 48 hours. Not a global EUVD catalog. Successful not-found lookups count as checked; they do not imply withdrawal or safety. No reader inventory is sent.","generation":"enrichment-52f0bd58a8564ba89a1952b43ef3bc92","complete":false,"records":13654,"lastAttemptAt":"2026-11-09T06:14:09.0160642+00:00","lastSuccessAt":"2026-11-09T06:14:09.013+00:00","error":"8 identifier lookups failed; latest failures include HTTP 403. Other identifiers were checked independently.","lastVerifiedAt":"2026-11-09T06:14:09.013+00:00","snapshotPublishedAt":null,"importing":false,"stagedRecords":0,"checkedIdentifiers":13674,"expectedIdentifiers":13706,"failedIdentifiers":8},{"source":"first-epss:nuget","scope":"FIRST EPSS for explicit CVE aliases in the collected public NuGet archive. Not a global EPSS backfill.","generation":"2026-11-09T06:02:15.5744295+00:00","complete":true,"records":1096,"lastAttemptAt":"2026-11-09T06:02:15.5744295+00:00","lastSuccessAt":"2026-11-09T06:02:15.8108397+00:00","error":null,"lastVerifiedAt":"2026-11-09T06:02:15.81084+00:00","snapshotPublishedAt":null,"importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"nvd","scope":"Rolling NVD lookups of CVE aliases in current public OSV archives; 500 identifiers per refresh, rechecked after 48 hours. Not a global NVD catalog. Successful not-found lookups count as checked; they do not imply withdrawal or safety. No reader inventory is sent.","generation":"enrichment-5a44a451442747cb81d83104fe1e7771","complete":true,"records":13666,"lastAttemptAt":"2026-11-09T06:02:16.371904+00:00","lastSuccessAt":"2026-11-09T02:08:52.274+00:00","error":null,"lastVerifiedAt":"2026-11-09T02:08:52.274+00:00","snapshotPublishedAt":null,"importing":false,"stagedRecords":0,"checkedIdentifiers":13706,"expectedIdentifiers":13706,"failedIdentifiers":0},{"source":"osv:Go","scope":"Complete OSV Go ecosystem archive, including withdrawn and malicious-package source records; statement counts are not unique CVE counts","generation":"go-980593e6977a6d1b4fb1eed5a1ffe88a468736f89f0a06f710924ad59132c023","complete":true,"records":9914,"lastAttemptAt":"2026-11-09T06:02:15.5156789+00:00","lastSuccessAt":"2026-11-08T11:07:07.068788+00:00","error":null,"lastVerifiedAt":"2026-11-09T06:02:15.5156789+00:00","snapshotPublishedAt":"2026-11-08T11:02:46+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"osv:NuGet","scope":"Complete OSV NuGet ecosystem archive, including GitHub Advisory Database records; NuGet version matching only","generation":"nuget-fde804134ecdda0ddd5ff5c26ee1fff5a6fa659311f7ef2e51c6ad54964db0e2","complete":true,"records":1971,"lastAttemptAt":"2026-11-09T06:02:14.6970768+00:00","lastSuccessAt":"2026-11-06T19:03:17.0399903+00:00","error":null,"lastVerifiedAt":"2026-11-09T06:02:14.6970768+00:00","snapshotPublishedAt":"2026-11-06T18:17:57+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"osv:crates.io","scope":"Complete OSV crates.io ecosystem archive, including withdrawn and malicious-package source records; statement counts are not unique CVE counts","generation":"crates.io-f6d341f4320a5a0c059c28102ee651c3dd06abc87b84d2bafa4e2a823ec07d35","complete":true,"records":3056,"lastAttemptAt":"2026-11-09T06:02:15.5284383+00:00","lastSuccessAt":"2026-11-09T05:02:23.1539412+00:00","error":null,"lastVerifiedAt":"2026-11-09T06:02:15.5284383+00:00","snapshotPublishedAt":"2026-11-09T04:47:48+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"osv:npm","scope":"Complete OSV npm ecosystem archive, including withdrawn and malicious-package source records; statement counts are not unique CVE counts","generation":"npm-6a1c845b1938b1aa788f0e95c9ac8a8d5a1f07caed5d155840b0616b548c1455","complete":true,"records":231296,"lastAttemptAt":"2026-11-09T06:02:15.4064738+00:00","lastSuccessAt":"2026-11-09T04:03:49.859595+00:00","error":null,"lastVerifiedAt":"2026-11-09T06:02:15.4064738+00:00","snapshotPublishedAt":"2026-11-09T03:33:06+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null}]}