{"id":"EUVD-2025-198300","enisaUuid":"3009e564-20b5-36ac-bbb4-893cffb0ba01","description":"A bug in the filesystem traversal fallback path causes fs/diriterate/diriterate.go:Next() to overindex an empty slice when ReadDir returns nil for an empty directory, resulting in a panic (index out of range) and an application crash (denial of service) in OSV-SCALIBR.","datePublished":"Nov 20, 2025, 3:30:31 PM","dateUpdated":"Nov 20, 2025, 4:24:21 PM","baseScore":1.9,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L/E:P","references":"https://github.com/google/osv-scalibr/commit/e67c4e198ca099cb7c16957a80f6c5331d90a672\n","aliases":"CVE-2025-13425\nGHSA-f786-75f3-74xj\n","assigner":"Google","epss":0.11,"enisaIdProduct":[{"id":"7b372657-e032-325c-aef3-0edffea76aea","product":{"name":"osv-scalibr","vendor":{"name":"Google"}},"product_version":"\u003c 0.3.4"}],"enisaIdVendor":[{"id":"c15b85ac-19a5-32e3-8ceb-feecbf0dbd4c","vendor":{"name":"Google"}}],"enisaIdVulnerability":[{"id":"01701f33-a1e5-3586-894d-4df796d2c53f","vulnerability":{"id":"GHSA-f786-75f3-74xj","description":"OSV-SCALIBR has NULL Pointer Dereference","datePublished":"Nov 20, 2025, 6:31:00 PM","dateUpdated":"Nov 27, 2025, 8:37:23 AM","baseScore":0.0,"references":"https://nvd.nist.gov/vuln/detail/CVE-2025-13425\nhttps://github.com/google/osv-scalibr/commit/e67c4e198ca099cb7c16957a80f6c5331d90a672\nhttps://github.com/advisories/GHSA-f786-75f3-74xj\nhttps://github.com/google/osv-scalibr\n","enisa_id":"EUVD-2025-198300\n","aliases":"GHSA-f786-75f3-74xj\nCVE-2025-13425\n","epss":0.0,"dataProcessed":"Oct 25, 2026, 1:51:54 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"02bf26a7-9a7d-3ad3-9a48-cbc64c4e0902","vulnerability":{"id":"CVE-2025-13425","description":"A bug in the filesystem traversal fallback path causes fs/diriterate/diriterate.go:Next() to overindex an empty slice when ReadDir returns nil for an empty directory, resulting in a panic (index out of range) and an application crash (denial of service) in OSV-SCALIBR.","datePublished":"Nov 20, 2025, 3:30:31 PM","dateUpdated":"Nov 20, 2025, 4:24:21 PM","status":"PUBLISHED","baseScore":1.9,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L/E:P","references":"https://github.com/google/osv-scalibr/commit/e67c4e198ca099cb7c16957a80f6c5331d90a672\n","enisa_id":"EUVD-2025-198300\n","assigner":"Google","epss":0.11,"dataProcessed":"Oct 31, 2026, 7:17:21 AM","vulnerabilityProduct":[{"id":"f30edea1-9e47-3afb-8332-74178eaccef3","product":{"name":"osv-scalibr","vendor":{"name":"Google"}},"product_version":"\u003c 0.3.4"}],"vulnerabilityVendor":[{"id":"8b728585-72ce-335f-97d1-e61cec2c0de9","vendor":{"name":"Google"}}]}}],"enisaIdAdvisory":[]}