{"id":"EUVD-2025-36731","revision":null,"records":[{"revision":"b20e6cd09a1a4b08a9e2a84757b88b9b","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2025-58183","aliases":[],"title":"Unbounded allocation when parsing GNU sparse map in archive/tar","description":"tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files. A maliciously-crafted archive containing a large number of sparse regions can cause a Reader to read an unbounded amount of data from the archive into memory. When reading from a compressed source, a small compressed input can result in large allocations.","state":0,"publishedAt":"2025-10-29T22:10:14.376+00:00","modifiedAt":"2025-11-04T21:13:32.834+00:00","affected":[{"ecosystem":"https://pkg.go.dev","name":"archive/tar","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Go standard library\",\n                    \"product\": \"archive/tar\",\n                    \"collectionURL\": \"https://pkg.go.dev\",\n                    \"packageName\": \"archive/tar\",\n                    \"versions\": [\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"1.24.8\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"1.25.0\",\n                            \"lessThan\": \"1.25.2\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\"\n                        }\n                    ],\n                    \"programRoutines\": [\n                        {\n                            \"name\": \"readGNUSparseMap1x0\"\n                        },\n                        {\n                            \"name\": \"Reader.Next\"\n                        }\n                    ],\n                    \"defaultStatus\": \"unaffected\"\n                }"}],"metrics":[],"references":["https://go.dev/cl/709861","https://go.dev/issue/75677","https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI","https://pkg.go.dev/vuln/GO-2025-4014"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2025-58183","license":"CVE Program Terms of Use","key":"cve-program:CVE-2025-58183","identifiers":["CVE-2025-58183"]},"retained":false,"historicalAffected":[]},{"revision":"d21850ca79294e328fea02f7cb3990c7","observedAt":"2026-11-11T03:36:31.812+00:00","statement":{"source":"euvd","id":"EUVD-2025-36731","aliases":["CVE-2025-58183","GHSA-9gcr-gp5f-jw27"],"title":"tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files. A maliciously-crafted archive containing a large number of sparse regions can cause a Reader to read an unbounded amount of d…","description":"tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files. A maliciously-crafted archive containing a large number of sparse regions can cause a Reader to read an unbounded amount of data from the archive into memory. When reading from a compressed source, a small compressed input can result in large allocations.","state":0,"publishedAt":null,"modifiedAt":null,"affected":[],"metrics":[{"system":"EUVD CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","score":4.3,"severity":null}],"references":["https://go.dev/cl/709861","https://go.dev/issue/75677","https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI","https://pkg.go.dev/vuln/GO-2025-4014"],"sourceUrl":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-36731","license":"ENISA EUVD · source terms and attribution apply","enrichment":{"sourceStatus":null,"weaknesses":[],"productCriteria":[],"sourceDates":{"datePublished":"Oct 29, 2025, 10:10:14 PM","dateUpdated":"Nov 4, 2025, 9:13:32 PM"},"relatedAdvisories":[{"id":"RHSA-2026:5234","title":"Red Hat Security Advisory: skopeo security update","vulnerabilityIds":["CVE-2025-58183"]},{"id":"RHSA-2026:2129","title":"Red Hat Security Advisory: OpenShift Container Platform 4.21.1 bug fix and security update","vulnerabilityIds":["CVE-2025-15284","CVE-2025-55198","CVE-2025-55199","CVE-2025-58068","CVE-2025-58183","CVE-2025-65637"]},{"id":"openSUSE-SU-2025:15723-1","title":"regclient-0.10.0-1.1 on GA media","vulnerabilityIds":["CVE-2025-47912","CVE-2025-58183","CVE-2025-58185","CVE-2025-58186","CVE-2025-58187","CVE-2025-58188","CVE-2025-58189","CVE-2025-61723","CVE-2025-9230","CVE-2025-9231","CVE-2025-9232"]},{"id":"RHSA-2025:23294","title":"Red Hat Security Advisory: skopeo security update","vulnerabilityIds":["CVE-2025-58183"]},{"id":"msrc_CVE-2025-58183","title":"Unbounded allocation when parsing GNU sparse map in archive/tar","vulnerabilityIds":["CVE-2025-58183"]},{"id":"SUSE-SU-2025:3682-1","title":"Security update for go1.24","vulnerabilityIds":["CVE-2025-47912","CVE-2025-58183","CVE-2025-58185","CVE-2025-58186","CVE-2025-58187","CVE-2025-58188","CVE-2025-58189","CVE-2025-61723","CVE-2025-61724","CVE-2025-61725"]},{"id":"RHSA-2026:13548","title":"Red Hat Security Advisory: Red Hat Advanced Cluster Management for Kubernetes v2.15.2 security update","vulnerabilityIds":["CVE-2025-13465","CVE-2025-58183","CVE-2025-61726","CVE-2026-4645","CVE-2026-22029","CVE-2026-25639","CVE-2026-29063","CVE-2026-32285","CVE-2026-33186","CVE-2026-33487","CVE-2026-40175"]},{"id":"RHSA-2026:26527","title":"Red Hat Security Advisory: OpenShift Container Platform 4.12.92 packages and security update","vulnerabilityIds":["CVE-2025-58183","CVE-2025-61726","CVE-2025-61729","CVE-2025-68121","CVE-2026-25679"]},{"id":"RHSA-2025:22030","title":"Red Hat Security Advisory: podman security update","vulnerabilityIds":["CVE-2025-52881","CVE-2025-58183"]},{"id":"RHSA-2025:23546","title":"Red Hat Security Advisory: Red Hat Quay 3.16.0","vulnerabilityIds":["CVE-2024-34156","CVE-2025-47913","CVE-2025-58183","CVE-2025-58754"]},{"id":"RHSA-2026:12279","title":"Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.19.15 security, enhancement & bug fix update","vulnerabilityIds":["CVE-2025-58183","CVE-2025-61726","CVE-2025-61729","CVE-2026-4800","CVE-2026-33036","CVE-2026-33186","CVE-2026-34986"]},{"id":"RHSA-2026:0973","title":"Red Hat Security Advisory: osbuild-composer security update","vulnerabilityIds":["CVE-2025-58183"]},{"id":"RHSA-2026:0246","title":"Red Hat Security Advisory: grafana security update","vulnerabilityIds":["CVE-2025-58183"]},{"id":"RHSA-2026:56347","title":"Red Hat Security Advisory: Migration Toolkit for Applications","vulnerabilityIds":["CVE-2025-47907","CVE-2025-53547","CVE-2025-58183","CVE-2025-61729","CVE-2026-8643","CVE-2026-25681","CVE-2026-27136","CVE-2026-44431","CVE-2026-44432","CVE-2026-59885","CVE-2026-59886"]},{"id":"RHSA-2025:21779","title":"Red Hat Security Advisory: golang security update","vulnerabilityIds":["CVE-2025-58183"]},{"id":"RHSA-2025:22738","title":"Red Hat Security Advisory: Red Hat OpenShift Builds 1.5.2","vulnerabilityIds":["CVE-2025-58183"]},{"id":"RHSA-2026:7252","title":"Red Hat Security Advisory: OpenShift Container Platform 4.13.65 bug fix and security update","vulnerabilityIds":["CVE-2025-65637"]},{"id":"RHSA-2026:1377","title":"Red Hat Security Advisory: image-builder security update","vulnerabilityIds":["CVE-2025-58183"]},{"id":"RHSA-2026:20089","title":"Red Hat Security Advisory: OpenShift Container Platform 4.16.63 security and extras update","vulnerabilityIds":["CVE-2025-58183","CVE-2026-24049","CVE-2026-33186","CVE-2026-35469"]},{"id":"RHSA-2026:0226","title":"Red Hat Security Advisory: osbuild-composer security update","vulnerabilityIds":["CVE-2025-58183"]},{"id":"RHSA-2026:6554","title":"Red Hat Security Advisory: OpenShift Container Platform 4.18.37 bug fix and security update","vulnerabilityIds":["CVE-2025-58183","CVE-2025-61726","CVE-2025-61728","CVE-2025-61729"]},{"id":"RHSA-2025:22345","title":"Red Hat Security Advisory: Red Hat OpenShift Developer Tools - Source-to-Image 1.5.2","vulnerabilityIds":["CVE-2025-58183"]},{"id":"RHSA-2026:2351","title":"Red Hat Security Advisory: VolSync v0.13 security fixes and container updates","vulnerabilityIds":["CVE-2025-47907","CVE-2025-58183","CVE-2025-65637"]},{"id":"RHSA-2025:23740","title":"Red Hat Security Advisory: go-toolset:rhel8 security update","vulnerabilityIds":["CVE-2025-47906","CVE-2025-58183"]},{"id":"RHSA-2026:21658","title":"Red Hat Security Advisory: OpenShift Container Platform 4.18.43 security and extras update","vulnerabilityIds":["CVE-2025-13465","CVE-2025-15284","CVE-2025-58183","CVE-2026-4800","CVE-2026-22029","CVE-2026-29063","CVE-2026-33186","CVE-2026-35469"]},{"id":"openSUSE-SU-2025:15695-1","title":"govulncheck-vulndb-0.0.20251029T215107-1.1 on GA media","vulnerabilityIds":["CVE-2025-47912","CVE-2025-58183","CVE-2025-58185","CVE-2025-58186","CVE-2025-58187","CVE-2025-58188","CVE-2025-58189","CVE-2025-61723","CVE-2025-61724","CVE-2025-61725"]},{"id":"RHSA-2026:2350","title":"Red Hat Security Advisory: RHACS 4.9.3 security and bug fix update","vulnerabilityIds":["CVE-2025-12816","CVE-2025-15284","CVE-2025-58183","CVE-2025-66031","CVE-2025-66506","CVE-2025-66564","CVE-2025-68428","CVE-2025-68973","CVE-2026-22029"]},{"id":"RHSA-2026:1379","title":"Red Hat Security Advisory: osbuild-composer security update","vulnerabilityIds":["CVE-2025-58183"]},{"id":"RHSA-2025:23088","title":"Red Hat Security Advisory: grafana security update","vulnerabilityIds":["CVE-2025-58183"]},{"id":"RHSA-2026:17446","title":"Red Hat Security Advisory: OpenShift Container Platform 4.18.42 packages and security update","vulnerabilityIds":["CVE-2025-58183","CVE-2025-61726","CVE-2025-61728","CVE-2025-61729","CVE-2025-68121","CVE-2026-23490"]},{"id":"openSUSE-SU-2025:15609-1","title":"go1.25-1.25.2-1.1 on GA media","vulnerabilityIds":["CVE-2025-47912","CVE-2025-58183","CVE-2025-58185","CVE-2025-58186","CVE-2025-58187","CVE-2025-58188","CVE-2025-58189","CVE-2025-61723","CVE-2025-61724","CVE-2025-61725"]},{"id":"RHSA-2026:2571","title":"Red Hat Security Advisory: multicluster engine for Kubernetes v2.9.2 security update","vulnerabilityIds":["CVE-2025-47907","CVE-2025-58183","CVE-2025-58190","CVE-2025-61729"]},{"id":"RHSA-2026:5107","title":"Red Hat Security Advisory: OpenShift Container Platform 4.14.63 bug fix and security update","vulnerabilityIds":["CVE-2025-47907","CVE-2025-58183","CVE-2025-65637"]},{"id":"RHSA-2026:0718","title":"Red Hat Security Advisory: Moderate: Red Hat Advanced Cluster Management for Kubernetes v2.13.5 security update","vulnerabilityIds":["CVE-2025-7195","CVE-2025-9288","CVE-2025-47907","CVE-2025-58183","CVE-2025-58754"]},{"id":"RHSA-2026:0663","title":"Red Hat Security Advisory: OpenShift Container Platform 4.20.11 bug fix and security update","vulnerabilityIds":["CVE-2025-58068","CVE-2025-58183"]},{"id":"RHSA-2026:5633","title":"Red Hat Security Advisory: Red Hat Advanced Cluster Management for Kubernetes v2.12.8 security update","vulnerabilityIds":["CVE-2025-7195","CVE-2025-13465","CVE-2025-47907","CVE-2025-58183","CVE-2026-21721","CVE-2026-22029","CVE-2026-25639"]},{"id":"RHSA-2026:1517","title":"Red Hat Security Advisory: RHACS 4.8.8 security and bug fix update","vulnerabilityIds":["CVE-2025-12816","CVE-2025-15284","CVE-2025-58183","CVE-2025-61729","CVE-2025-66031","CVE-2025-66506","CVE-2025-66564","CVE-2025-68428","CVE-2025-68973","CVE-2026-22029"]},{"id":"RHSA-2026:2900","title":"Red Hat Security Advisory: Network Observability 1.11.0 for OpenShift","vulnerabilityIds":["CVE-2024-25621","CVE-2025-12816","CVE-2025-13465","CVE-2025-15284","CVE-2025-52881","CVE-2025-58183","CVE-2025-64329","CVE-2025-66031","CVE-2025-66418","CVE-2025-66471","CVE-2025-66506","CVE-2026-21441","CVE-2026-23745","CVE-2026-24049","CVE-2026-24842"]},{"id":"RHSA-2025:23733","title":"Red Hat Security Advisory: go-toolset:rhel8 security update","vulnerabilityIds":["CVE-2025-47906","CVE-2025-58183"]},{"id":"RHSA-2026:6226","title":"Red Hat Security Advisory: Multicluster Global Hub 1.6.2 security update","vulnerabilityIds":["CVE-2025-47907","CVE-2025-57810","CVE-2025-58183","CVE-2025-58754","CVE-2025-59343","CVE-2025-61726","CVE-2025-61728","CVE-2025-61729","CVE-2025-68121","CVE-2026-27571"]},{"id":"RHSA-2025:23347","title":"Red Hat Security Advisory: podman security update","vulnerabilityIds":["CVE-2025-52881","CVE-2025-58183"]},{"id":"SUSE-SU-2026:0296-1","title":"Security update for go1.24-openssl","vulnerabilityIds":["CVE-2025-47912","CVE-2025-58183","CVE-2025-58185","CVE-2025-58186","CVE-2025-58187","CVE-2025-58188","CVE-2025-58189","CVE-2025-61723","CVE-2025-61724","CVE-2025-61725","CVE-2025-61726","CVE-2025-61727","CVE-2025-61728","CVE-2025-61729","CVE-2025-61730","CVE-2025-61731","CVE-2025-68119","CVE-2025-68121"]},{"id":"RHSA-2026:1942","title":"Red Hat Security Advisory: Red Hat Quay 3.15.3","vulnerabilityIds":["CVE-2024-34156","CVE-2025-12816","CVE-2025-15284","CVE-2025-47907","CVE-2025-47913","CVE-2025-52881","CVE-2025-58183","CVE-2025-58754","CVE-2025-59420","CVE-2025-61729","CVE-2025-65945","CVE-2025-66418","CVE-2025-66471","CVE-2025-66506","CVE-2026-21441","CVE-2026-24049"]},{"id":"RHSA-2026:5866","title":"Red Hat Security Advisory: OpenShift Container Platform 4.17.52 packages and security update","vulnerabilityIds":["CVE-2025-58183","CVE-2025-61729","CVE-2025-68121"]},{"id":"openSUSE-SU-2026:20301-1","title":"Security update for go1.25-openssl","vulnerabilityIds":["CVE-2025-47912","CVE-2025-58183","CVE-2025-58185","CVE-2025-58186","CVE-2025-58187","CVE-2025-58188","CVE-2025-58189","CVE-2025-61723","CVE-2025-61724","CVE-2025-61725","CVE-2025-61726","CVE-2025-61727","CVE-2025-61728","CVE-2025-61729","CVE-2025-61730","CVE-2025-61731","CVE-2025-68119","CVE-2025-68121"]},{"id":"RHSA-2026:1838","title":"Red Hat Security Advisory: image-builder security update","vulnerabilityIds":["CVE-2025-58183"]},{"id":"RHSA-2026:41941","title":"Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.18.25 security, enhancement & bug fix update","vulnerabilityIds":["CVE-2025-12816","CVE-2025-13465","CVE-2025-15284","CVE-2025-47907","CVE-2025-58183","CVE-2025-61726","CVE-2025-61729","CVE-2025-66031","CVE-2025-68157","CVE-2025-68458","CVE-2025-69873","CVE-2026-4800","CVE-2026-25896","CVE-2026-26278","CVE-2026-26996","CVE-2026-27904","CVE-2026-27942","CVE-2026-29063","CVE-2026-33036","CVE-2026-33186","CVE-2026-34986","CVE-2026-48779"]},{"id":"RHSA-2026:4532","title":"Red Hat Security Advisory: buildah security update","vulnerabilityIds":["CVE-2025-47913","CVE-2025-52881","CVE-2025-58183","CVE-2025-65637"]},{"id":"RHSA-2025:23741","title":"Red Hat Security Advisory: go-toolset:rhel8 security update","vulnerabilityIds":["CVE-2025-47906","CVE-2025-58183"]},{"id":"RHSA-2026:5876","title":"Red Hat Security Advisory: OpenShift Container Platform 4.19.27 packages and security update","vulnerabilityIds":["CVE-2025-58183","CVE-2025-68121"]},{"id":"RHSA-2025:22668","title":"Red Hat Security Advisory: go-toolset:rhel8 security update","vulnerabilityIds":["CVE-2025-47906","CVE-2025-58183"]},{"id":"RHSA-2026:7385","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","vulnerabilityIds":["CVE-2025-22873","CVE-2025-47910","CVE-2025-47911","CVE-2025-47912","CVE-2025-47914","CVE-2025-58181","CVE-2025-58183","CVE-2025-58185","CVE-2025-58186","CVE-2025-58187","CVE-2025-58188","CVE-2025-58189","CVE-2025-58190","CVE-2025-61723","CVE-2025-61724","CVE-2025-61725","CVE-2025-61726","CVE-2025-61727","CVE-2025-61728","CVE-2025-61729","CVE-2025-61730","CVE-2025-61731","CVE-2025-61732","CVE-2025-68119","CVE-2025-68121","CVE-2026-25679","CVE-2026-27139","CVE-2026-27141","CVE-2026-27143","CVE-2026-27144","CVE-2026-32281","CVE-2026-32282","CVE-2026-32283","CVE-2026-32288","CVE-2026-32289","CVE-2026-33809","CVE-2026-33813","CVE-2026-42503"]},{"id":"openSUSE-SU-2025:15711-1","title":"opentofu-1.10.7-1.1 on GA media","vulnerabilityIds":["CVE-2025-58183","CVE-2025-58185","CVE-2025-58187"]},{"id":"RHSA-2026:2572","title":"Red Hat Security Advisory: Red Hat Advanced Cluster Management for Kubernetes v2.14.2 security update","vulnerabilityIds":["CVE-2025-7195","CVE-2025-47907","CVE-2025-53547","CVE-2025-58183","CVE-2025-61729","CVE-2025-68156","CVE-2026-22029"]},{"id":"RHSA-2026:13542","title":"Red Hat Security Advisory: multicluster engine for Kubernetes v2.10.2 security update","vulnerabilityIds":["CVE-2025-13465","CVE-2025-58183","CVE-2025-61726","CVE-2025-61729","CVE-2025-68121","CVE-2026-4740","CVE-2026-22029","CVE-2026-25639","CVE-2026-29063","CVE-2026-40175"]},{"id":"WID-SEC-W-2025-2227","title":"Golang Go: Mehrere Schwachstellen","vulnerabilityIds":["CVE-2025-47912","CVE-2025-58183","CVE-2025-58185","CVE-2025-58186","CVE-2025-58187","CVE-2025-58188","CVE-2025-58189","CVE-2025-61723","CVE-2025-61724","CVE-2025-61725"]},{"id":"RHSA-2025:22255","title":"Red Hat Security Advisory: OpenShift Container Platform 4.20.6 packages and security update","vulnerabilityIds":["CVE-2025-58183"]},{"id":"RHSA-2026:1017","title":"Red Hat Security Advisory: Red Hat OpenShift GitOps v1.18.3 security update","vulnerabilityIds":["CVE-2025-13888","CVE-2025-47913","CVE-2025-55190","CVE-2025-58183","CVE-2025-61729","CVE-2025-68156"]},{"id":"RHSA-2026:4936","title":"Red Hat Security Advisory: Release of containers for RHOSO 18.0.17 security update","vulnerabilityIds":["CVE-2025-58183","CVE-2025-61729"]},{"id":"RHSA-2026:0245","title":"Red Hat Security Advisory: grafana security update","vulnerabilityIds":["CVE-2025-58183"]},{"id":"RHSA-2026:6564","title":"Red Hat Security Advisory: OpenShift Container Platform 4.20.18 bug fix and security update","vulnerabilityIds":["CVE-2025-58183","CVE-2025-61726","CVE-2025-61728","CVE-2026-22028","CVE-2026-25679","CVE-2026-33186"]},{"id":"RHSA-2026:1072","title":"Red Hat Security Advisory: Red Hat Advanced Cluster Management for Kubernetes v2.15.1 security update","vulnerabilityIds":["CVE-2025-58183"]},{"id":"RHSA-2026:8218","title":"Red Hat Security Advisory: multicluster engine for Kubernetes v2.8.5 security update","vulnerabilityIds":["CVE-2025-13465","CVE-2025-47907","CVE-2025-58183","CVE-2025-61726","CVE-2025-61729","CVE-2025-68121","CVE-2026-4740","CVE-2026-22029","CVE-2026-25639","CVE-2026-29063"]},{"id":"RHSA-2026:1520","title":"Red Hat Security Advisory: Red Hat multicluster global hub 1.6.1 security update","vulnerabilityIds":["CVE-2025-58183"]},{"id":"RHSA-2026:47388","title":"Red Hat Security Advisory: multicluster engine for Kubernetes v2.10.4 security update","vulnerabilityIds":["CVE-2025-58183","CVE-2026-16242","CVE-2026-17107","CVE-2026-33747","CVE-2026-33748","CVE-2026-33811","CVE-2026-34986","CVE-2026-39828","CVE-2026-39829","CVE-2026-39830","CVE-2026-39835","CVE-2026-42508","CVE-2026-44486","CVE-2026-44487","CVE-2026-44488","CVE-2026-44492","CVE-2026-44494","CVE-2026-44495","CVE-2026-44496","CVE-2026-44740","CVE-2026-44990","CVE-2026-59869"]},{"id":"RHSA-2025:23421","title":"Red Hat Security Advisory: Red Hat OpenShift distributed tracing platform (Tempo) 3.8.1 release","vulnerabilityIds":["CVE-2025-58183"]},{"id":"RHSA-2026:0722","title":"Red Hat Security Advisory: multicluster engine for Kubernetes v2.8.4 security update","vulnerabilityIds":["CVE-2022-21698","CVE-2023-44487","CVE-2024-24786","CVE-2025-7195","CVE-2025-9287","CVE-2025-9288","CVE-2025-30204","CVE-2025-47907","CVE-2025-58183"]},{"id":"SUSE-SU-2026:20629-1","title":"Security update for go1.24-openssl","vulnerabilityIds":["CVE-2025-47912","CVE-2025-58183","CVE-2025-58185","CVE-2025-58186","CVE-2025-58187","CVE-2025-58188","CVE-2025-58189","CVE-2025-61723","CVE-2025-61724","CVE-2025-61725","CVE-2025-61726","CVE-2025-61727","CVE-2025-61728","CVE-2025-61729","CVE-2025-61730","CVE-2025-61731","CVE-2025-61732","CVE-2025-68119","CVE-2025-68121"]},{"id":"SUSE-SU-2026:0298-1","title":"Security update for go1.25-openssl","vulnerabilityIds":["CVE-2025-4674","CVE-2025-47906","CVE-2025-47907","CVE-2025-47910","CVE-2025-47912","CVE-2025-58183","CVE-2025-58185","CVE-2025-58186","CVE-2025-58187","CVE-2025-58188","CVE-2025-58189","CVE-2025-61723","CVE-2025-61724","CVE-2025-61725","CVE-2025-61726","CVE-2025-61727","CVE-2025-61728","CVE-2025-61729","CVE-2025-61730","CVE-2025-61731","CVE-2025-68119","CVE-2025-68121"]},{"id":"RHSA-2026:1378","title":"Red Hat Security Advisory: osbuild-composer security update","vulnerabilityIds":["CVE-2025-58183"]},{"id":"RHSA-2025:21815","title":"Red Hat Security Advisory: delve and golang security update","vulnerabilityIds":["CVE-2025-58183"]},{"id":"RHSA-2026:3875","title":"Red Hat Security Advisory: OpenShift Container Platform 4.18.35 packages and security update","vulnerabilityIds":["CVE-2025-58183","CVE-2025-61726"]},{"id":"RHSA-2026:46885","title":"Red Hat Security Advisory: multicluster engine for Kubernetes v2.10.4 security update","vulnerabilityIds":["CVE-2025-58183","CVE-2026-16242","CVE-2026-17107","CVE-2026-33747","CVE-2026-33748","CVE-2026-33811","CVE-2026-34986","CVE-2026-39828","CVE-2026-39829","CVE-2026-39830","CVE-2026-39835","CVE-2026-42508","CVE-2026-44486","CVE-2026-44487","CVE-2026-44488","CVE-2026-44492","CVE-2026-44494","CVE-2026-44495","CVE-2026-44496","CVE-2026-44740","CVE-2026-44990","CVE-2026-59869"]},{"id":"RHSA-2026:4464","title":"Red Hat Security Advisory: OpenShift Container Platform 4.16.58 packages and security update","vulnerabilityIds":["CVE-2025-58183","CVE-2025-61729"]},{"id":"RHSA-2026:5645","title":"Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.17.1","vulnerabilityIds":["CVE-2025-47907","CVE-2025-58183","CVE-2025-61726","CVE-2025-61728","CVE-2025-61729","CVE-2025-68121"]},{"id":"RHSA-2026:1067","title":"Red Hat Security Advisory: Assisted Installer RHEL 9 components for Multicluster Engine for Kubernetes 2.10.1","vulnerabilityIds":["CVE-2025-58183"]},{"id":"RHSA-2026:26541","title":"Red Hat Security Advisory: OpenShift Container Platform 4.13.68 packages and security update","vulnerabilityIds":["CVE-2025-58183","CVE-2025-61726","CVE-2025-61728","CVE-2025-61729","CVE-2025-68121","CVE-2026-25679"]},{"id":"RHSA-2025:23394","title":"Red Hat Security Advisory: skopeo security update","vulnerabilityIds":["CVE-2025-58183"]},{"id":"SUSE-SU-2026:0308-1","title":"Security update for go1.24-openssl","vulnerabilityIds":["CVE-2025-47912","CVE-2025-58183","CVE-2025-58185","CVE-2025-58186","CVE-2025-58187","CVE-2025-58188","CVE-2025-58189","CVE-2025-61723","CVE-2025-61724","CVE-2025-61725","CVE-2025-61726","CVE-2025-61727","CVE-2025-61728","CVE-2025-61729","CVE-2025-61730","CVE-2025-61731","CVE-2025-68119","CVE-2025-68121"]},{"id":"RHSA-2026:0477","title":"Red Hat Security Advisory: skopeo security update","vulnerabilityIds":["CVE-2025-58183"]},{"id":"RHSA-2025:23002","title":"Red Hat Security Advisory: grafana security update","vulnerabilityIds":["CVE-2025-58183"]},{"id":"RHSA-2026:8325","title":"Red Hat Security Advisory: buildah, crun, podman, runc, and skopeo security update","vulnerabilityIds":["CVE-2025-31133","CVE-2025-47913","CVE-2025-52565","CVE-2025-52881","CVE-2025-58183","CVE-2025-65637"]},{"id":"RHSA-2026:0987","title":"Red Hat Security Advisory: osbuild-composer security update","vulnerabilityIds":["CVE-2025-58183"]},{"id":"RHSA-2026:0312","title":"Red Hat Security Advisory: cups security update","vulnerabilityIds":["CVE-2025-58183","CVE-2025-58436","CVE-2025-61915"]},{"id":"SUSE-SU-2025:21192-1","title":"Security update for go1.25","vulnerabilityIds":["CVE-2025-47910","CVE-2025-47912","CVE-2025-58183","CVE-2025-58185","CVE-2025-58186","CVE-2025-58187","CVE-2025-58188","CVE-2025-58189","CVE-2025-61723","CVE-2025-61724","CVE-2025-61725","CVE-2025-61727","CVE-2025-61729"]},{"id":"RHSA-2026:21704","title":"Red Hat Security Advisory: OpenShift Container Platform 4.20.24 security and extras update","vulnerabilityIds":["CVE-2025-58183","CVE-2026-33186"]},{"id":"RHSA-2026:4693","title":"Red Hat Security Advisory: container-tools:rhel8 security update","vulnerabilityIds":["CVE-2024-45336","CVE-2025-22866","CVE-2025-31133","CVE-2025-47913","CVE-2025-52565","CVE-2025-52881","CVE-2025-58183","CVE-2025-65637"]},{"id":"RHSA-2025:23736","title":"Red Hat Security Advisory: grafana security update","vulnerabilityIds":["CVE-2025-58183"]},{"id":"RHSA-2026:0243","title":"Red Hat Security Advisory: grafana security update","vulnerabilityIds":["CVE-2025-58183"]},{"id":"SUSE-SU-2026:20623-1","title":"Security update for go1.25-openssl","vulnerabilityIds":["CVE-2025-47912","CVE-2025-58183","CVE-2025-58185","CVE-2025-58186","CVE-2025-58187","CVE-2025-58188","CVE-2025-58189","CVE-2025-61723","CVE-2025-61724","CVE-2025-61725","CVE-2025-61726","CVE-2025-61727","CVE-2025-61728","CVE-2025-61729","CVE-2025-61730","CVE-2025-61731","CVE-2025-68119","CVE-2025-68121"]},{"id":"RHSA-2026:0244","title":"Red Hat Security Advisory: grafana security update","vulnerabilityIds":["CVE-2025-58183"]},{"id":"RHSA-2025:22012","title":"Red Hat Security Advisory: buildah security update","vulnerabilityIds":["CVE-2025-52881","CVE-2025-58183"]},{"id":"RHSA-2026:6493","title":"Red Hat Security Advisory: OpenShift Container Platform 4.12.87 bug fix and security update","vulnerabilityIds":["CVE-2025-65637"]},{"id":"RHSA-2025:23326","title":"Red Hat Security Advisory: skopeo security update","vulnerabilityIds":["CVE-2025-58183"]},{"id":"RHSA-2026:1380","title":"Red Hat Security Advisory: osbuild-composer security update","vulnerabilityIds":["CVE-2025-58183"]},{"id":"RHSA-2026:2456","title":"Red Hat Security Advisory: Red Hat OpenShift Dev Spaces 3.26.0 Release.","vulnerabilityIds":["CVE-2024-25621","CVE-2025-12816","CVE-2025-15284","CVE-2025-52881","CVE-2025-58183","CVE-2025-61729","CVE-2025-64756","CVE-2025-65945","CVE-2025-66031","CVE-2025-66418","CVE-2025-66471","CVE-2025-66490","CVE-2026-21441","CVE-2026-22029"]},{"id":"RHSA-2026:83622","title":"Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.17.28 security, enhancement & bug fix update","vulnerabilityIds":["CVE-2025-12816","CVE-2025-13465","CVE-2025-15284","CVE-2025-58183","CVE-2025-61726","CVE-2025-61729","CVE-2025-66031","CVE-2025-68157","CVE-2025-68458","CVE-2025-69873","CVE-2026-4800","CVE-2026-6321","CVE-2026-22029","CVE-2026-26996","CVE-2026-27904","CVE-2026-29063","CVE-2026-33186"]},{"id":"RHSA-2026:0426","title":"Red Hat Security Advisory: buildah security update","vulnerabilityIds":["CVE-2025-52881","CVE-2025-58183"]},{"id":"RHSA-2025:22181","title":"Red Hat Security Advisory: golang security update","vulnerabilityIds":["CVE-2025-47906","CVE-2025-58183"]},{"id":"openSUSE-SU-2025:15608-1","title":"go1.24-1.24.8-1.1 on GA media","vulnerabilityIds":["CVE-2025-47912","CVE-2025-58183","CVE-2025-58185","CVE-2025-58186","CVE-2025-58187","CVE-2025-58188","CVE-2025-58189","CVE-2025-61723","CVE-2025-61724","CVE-2025-61725"]},{"id":"RHSA-2026:0314","title":"Red Hat Security Advisory: osbuild-composer security update","vulnerabilityIds":["CVE-2025-58183"]},{"id":"RHSA-2026:17595","title":"Red Hat Security Advisory: OpenShift Container Platform 4.17.54 packages and security update","vulnerabilityIds":["CVE-2025-58183","CVE-2025-61726","CVE-2025-61728","CVE-2025-61729","CVE-2025-68121","CVE-2026-23490"]},{"id":"SUSE-SU-2025:03547-1","title":"Security update for go1.25","vulnerabilityIds":["CVE-2025-47912","CVE-2025-58183","CVE-2025-58185","CVE-2025-58186","CVE-2025-58187","CVE-2025-58188","CVE-2025-58189","CVE-2025-61723","CVE-2025-61724","CVE-2025-61725"]},{"id":"RHSA-2026:0227","title":"Red Hat Security Advisory: osbuild-composer security update","vulnerabilityIds":["CVE-2025-58183"]},{"id":"RHSA-2026:0627","title":"Red Hat Security Advisory: Red Hat Advanced Cluster Management for Kubernetes v2.13.5 security update","vulnerabilityIds":["CVE-2025-7195","CVE-2025-9287","CVE-2025-9288","CVE-2025-27144","CVE-2025-47907","CVE-2025-58183","CVE-2025-58754"]},{"id":"RHSA-2025:22759","title":"Red Hat Security Advisory: RHOAI 2.22.3 - Red Hat OpenShift AI","vulnerabilityIds":["CVE-2025-9905","CVE-2025-12060","CVE-2025-47907","CVE-2025-53643","CVE-2025-58183","CVE-2025-58754","CVE-2025-62156","CVE-2025-62727"]},{"id":"RHSA-2026:4423","title":"Red Hat Security Advisory: OpenShift Container Platform 4.15.62 bug fix and security update","vulnerabilityIds":["CVE-2025-13465","CVE-2025-47907","CVE-2025-58183","CVE-2025-65637"]},{"id":"RHSA-2026:1488","title":"Red Hat Security Advisory: Red Hat OpenShift GitOps v1.19.1 security update","vulnerabilityIds":["CVE-2025-55190","CVE-2025-58183"]},{"id":"RHSA-2025:23087","title":"Red Hat Security Advisory: grafana security update","vulnerabilityIds":["CVE-2025-58183"]},{"id":"RHSA-2026:4510","title":"Red Hat Security Advisory: OpenShift Container Platform 4.17.51 bug fix and security update","vulnerabilityIds":["CVE-2025-47907","CVE-2025-58183","CVE-2025-61726","CVE-2025-61729","CVE-2025-65637"]},{"id":"RHSA-2025:22743","title":"Red Hat Security Advisory: Red Hat OpenShift Builds 1.6.1","vulnerabilityIds":["CVE-2025-47913","CVE-2025-58183"]},{"id":"RHSA-2026:2071","title":"Red Hat Security Advisory: OpenShift Container Platform 4.18.33 packages and security update","vulnerabilityIds":["CVE-2025-58183"]},{"id":"RHSA-2025:21964","title":"Red Hat Security Advisory: buildah security update","vulnerabilityIds":["CVE-2025-58183"]},{"id":"SUSE-SU-2025:21193-1","title":"Security update for go1.24","vulnerabilityIds":["CVE-2025-47912","CVE-2025-58183","CVE-2025-58185","CVE-2025-58186","CVE-2025-58187","CVE-2025-58188","CVE-2025-58189","CVE-2025-61723","CVE-2025-61724","CVE-2025-61725","CVE-2025-61727","CVE-2025-61729"]},{"id":"RHSA-2026:26420","title":"Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.18.24 security, enhancement & bug fix update","vulnerabilityIds":["CVE-2025-58183","CVE-2025-61726","CVE-2025-61729","CVE-2026-6321","CVE-2026-22029","CVE-2026-25128","CVE-2026-33186"]},{"id":"RHSA-2026:7291","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","vulnerabilityIds":["CVE-2025-22873","CVE-2025-47910","CVE-2025-47911","CVE-2025-47912","CVE-2025-47914","CVE-2025-58181","CVE-2025-58183","CVE-2025-58185","CVE-2025-58186","CVE-2025-58187","CVE-2025-58188","CVE-2025-58189","CVE-2025-58190","CVE-2025-61723","CVE-2025-61724","CVE-2025-61725","CVE-2025-61726","CVE-2025-61727","CVE-2025-61728","CVE-2025-61729","CVE-2025-61730","CVE-2025-61731","CVE-2025-61732","CVE-2025-68119","CVE-2025-68121","CVE-2026-25679","CVE-2026-27137","CVE-2026-27138","CVE-2026-27139","CVE-2026-27141","CVE-2026-27142","CVE-2026-27143","CVE-2026-27144","CVE-2026-32281","CVE-2026-32282","CVE-2026-32283","CVE-2026-32288","CVE-2026-32289","CVE-2026-33809","CVE-2026-33810"]},{"id":"RHSA-2026:4533","title":"Red Hat Security Advisory: podman security update","vulnerabilityIds":["CVE-2025-52881","CVE-2025-58183","CVE-2025-65637"]},{"id":"RHSA-2025:23295","title":"Red Hat Security Advisory: podman security update","vulnerabilityIds":["CVE-2025-58183"]},{"id":"RHSA-2026:0530","title":"Red Hat Security Advisory: Red Hat OpenShift Service Mesh 2.6.12","vulnerabilityIds":["CVE-2025-58183"]},{"id":"RHSA-2026:2711","title":"Red Hat Security Advisory: Red Hat Ceph Storage 8.1 security and bug fix update","vulnerabilityIds":["CVE-2019-10790","CVE-2022-34749","CVE-2024-31884","CVE-2025-58183"]},{"id":"RHSA-2026:20034","title":"Red Hat Security Advisory: OpenShift Container Platform 4.21.17 bug fix and security update","vulnerabilityIds":["CVE-2025-58183","CVE-2026-29063","CVE-2026-33186","CVE-2026-34986","CVE-2026-35469","CVE-2026-41674"]},{"id":"RHSA-2026:1837","title":"Red Hat Security Advisory: osbuild-composer security update","vulnerabilityIds":["CVE-2025-58183"]},{"id":"RHSA-2026:41928","title":"Red Hat Security Advisory: Red Hat Migration Toolkit for Containers","vulnerabilityIds":["CVE-2025-7783","CVE-2025-12816","CVE-2025-13465","CVE-2025-15284","CVE-2025-52881","CVE-2025-58183","CVE-2025-58754","CVE-2025-61726","CVE-2025-61729","CVE-2025-62718","CVE-2025-66031","CVE-2025-66418","CVE-2025-66471","CVE-2025-66506","CVE-2025-68121","CVE-2025-69223","CVE-2025-69227","CVE-2025-69228","CVE-2026-4800","CVE-2026-6322","CVE-2026-9277","CVE-2026-9595","CVE-2026-12143","CVE-2026-13149","CVE-2026-13676","CVE-2026-21441","CVE-2026-22029","CVE-2026-23490","CVE-2026-23745","CVE-2026-25679","CVE-2026-25681","CVE-2026-27136","CVE-2026-27137","CVE-2026-29063","CVE-2026-30922","CVE-2026-32280","CVE-2026-32281","CVE-2026-32283","CVE-2026-33186","CVE-2026-33810","CVE-2026-33811","CVE-2026-34986","CVE-2026-39820","CVE-2026-39821","CVE-2026-40895","CVE-2026-42264","CVE-2026-42338","CVE-2026-42499","CVE-2026-44486","CVE-2026-44487","CVE-2026-44488","CVE-2026-44492","CVE-2026-44494","CVE-2026-44495","CVE-2026-44496","CVE-2026-45736","CVE-2026-45822","CVE-2026-48779"]},{"id":"RHSA-2026:2343","title":"Red Hat Security Advisory: Red Hat OpenShift API for Data Protection","vulnerabilityIds":["CVE-2024-25621","CVE-2025-52881","CVE-2025-58183","CVE-2025-61729"]},{"id":"RHSA-2026:0527","title":"Red Hat Security Advisory: VolSync v0.14 security fixes and container updates","vulnerabilityIds":["CVE-2025-47913","CVE-2025-58183"]},{"id":"RHSA-2025:23348","title":"Red Hat Security Advisory: skopeo security update","vulnerabilityIds":["CVE-2025-58183"]},{"id":"RHSA-2026:1025","title":"Red Hat Security Advisory: osbuild-composer security update","vulnerabilityIds":["CVE-2025-58183"]},{"id":"RHSA-2026:1552","title":"Red Hat Security Advisory: OpenShift Container Platform 4.19.23 bug fix and security update","vulnerabilityIds":["CVE-2025-15284","CVE-2025-58068","CVE-2025-58183","CVE-2025-65637"]},{"id":"RHSA-2025:23948","title":"Red Hat Security Advisory: grafana security update","vulnerabilityIds":["CVE-2025-58183"]},{"id":"RHSA-2025:23737","title":"Red Hat Security Advisory: go-toolset:rhel8 security update","vulnerabilityIds":["CVE-2025-47906","CVE-2025-58183"]},{"id":"openSUSE-SU-2025:20158-1","title":"Security update for go1.24","vulnerabilityIds":["CVE-2025-47912","CVE-2025-58183","CVE-2025-58185","CVE-2025-58186","CVE-2025-58187","CVE-2025-58188","CVE-2025-58189","CVE-2025-61723","CVE-2025-61724","CVE-2025-61725","CVE-2025-61727","CVE-2025-61729"]},{"id":"RHSA-2026:4215","title":"Red Hat Security Advisory: Red Hat Quay 3.14.6","vulnerabilityIds":["CVE-2022-30187","CVE-2024-34156","CVE-2024-47081","CVE-2025-12816","CVE-2025-15284","CVE-2025-45768","CVE-2025-47273","CVE-2025-47913","CVE-2025-50181","CVE-2025-52881","CVE-2025-58183","CVE-2025-58754","CVE-2025-59420","CVE-2025-61729","CVE-2025-61920","CVE-2025-65945","CVE-2025-66418","CVE-2025-66471","CVE-2025-66506","CVE-2026-21441","CVE-2026-24049"]},{"id":"RHSA-2025:23001","title":"Red Hat Security Advisory: grafana security update","vulnerabilityIds":["CVE-2025-58183"]},{"id":"RHSA-2026:1018","title":"Red Hat Security Advisory: Red Hat OpenShift GitOps v1.17.4 security update","vulnerabilityIds":["CVE-2025-47913","CVE-2025-55190","CVE-2025-58183","CVE-2025-58754","CVE-2025-61729","CVE-2025-68156"]},{"id":"SUSE-SU-2026:0297-1","title":"Security update for go1.25-openssl","vulnerabilityIds":["CVE-2025-4674","CVE-2025-47906","CVE-2025-47907","CVE-2025-47910","CVE-2025-47912","CVE-2025-58183","CVE-2025-58185","CVE-2025-58186","CVE-2025-58187","CVE-2025-58188","CVE-2025-58189","CVE-2025-61723","CVE-2025-61724","CVE-2025-61725","CVE-2025-61726","CVE-2025-61727","CVE-2025-61728","CVE-2025-61729","CVE-2025-61730","CVE-2025-61731","CVE-2025-68119","CVE-2025-68121"]},{"id":"RHSA-2025:23747","title":"Red Hat Security Advisory: grafana security update","vulnerabilityIds":["CVE-2025-58183"]},{"id":"RHSA-2026:1071","title":"Red Hat Security Advisory: multicluster engine for Kubernetes v2.10.1 security update","vulnerabilityIds":["CVE-2025-47907","CVE-2025-58183"]},{"id":"RHSA-2026:10703","title":"Red Hat Security Advisory: container-tools:rhel8 security update","vulnerabilityIds":["CVE-2025-31133","CVE-2025-47913","CVE-2025-52565","CVE-2025-52881","CVE-2025-58183","CVE-2025-65637"]},{"id":"RHSA-2026:2082","title":"Red Hat Security Advisory: OpenShift Container Platform 4.21.1 packages and security update","vulnerabilityIds":["CVE-2025-58183"]},{"id":"RHSA-2026:2568","title":"Red Hat Security Advisory: RHACS 4.9.3 security and bug fix update","vulnerabilityIds":["CVE-2025-12816","CVE-2025-15284","CVE-2025-58183","CVE-2025-66031","CVE-2025-66506","CVE-2025-66564","CVE-2025-68428","CVE-2025-68973","CVE-2026-22029"]},{"id":"RHSA-2026:20042","title":"Red Hat Security Advisory: OpenShift Container Platform 4.19.32 security and extras update","vulnerabilityIds":["CVE-2025-13465","CVE-2025-15284","CVE-2025-58183","CVE-2026-4800","CVE-2026-22029","CVE-2026-29063","CVE-2026-33186","CVE-2026-35469"]},{"id":"RHSA-2026:5636","title":"Red Hat Security Advisory: multicluster engine for Kubernetes v2.7.9 security update","vulnerabilityIds":["CVE-2025-13465","CVE-2025-47907","CVE-2025-58183","CVE-2025-61726","CVE-2025-61729","CVE-2025-68121","CVE-2026-22029","CVE-2026-25639"]},{"id":"openSUSE-SU-2026:20308-1","title":"Security update for go1.24-openssl","vulnerabilityIds":["CVE-2025-47912","CVE-2025-58183","CVE-2025-58185","CVE-2025-58186","CVE-2025-58187","CVE-2025-58188","CVE-2025-58189","CVE-2025-61723","CVE-2025-61724","CVE-2025-61725","CVE-2025-61726","CVE-2025-61727","CVE-2025-61728","CVE-2025-61729","CVE-2025-61730","CVE-2025-61731","CVE-2025-61732","CVE-2025-68119","CVE-2025-68121"]},{"id":"RHSA-2026:2737","title":"Red Hat Security Advisory: Red Hat Ceph Storage","vulnerabilityIds":["CVE-2019-10790","CVE-2021-23358","CVE-2022-34749","CVE-2024-31884","CVE-2024-51744","CVE-2024-55565","CVE-2025-6176","CVE-2025-7783","CVE-2025-12816","CVE-2025-14104","CVE-2025-26791","CVE-2025-47907","CVE-2025-47913","CVE-2025-58183","CVE-2025-66031","CVE-2025-66418","CVE-2025-66471","CVE-2025-68429"]},{"id":"openSUSE-SU-2025:20157-1","title":"Security update for go1.25","vulnerabilityIds":["CVE-2025-47910","CVE-2025-47912","CVE-2025-58183","CVE-2025-58185","CVE-2025-58186","CVE-2025-58187","CVE-2025-58188","CVE-2025-58189","CVE-2025-61723","CVE-2025-61724","CVE-2025-61725","CVE-2025-61727","CVE-2025-61729"]},{"id":"RHSA-2026:21701","title":"Red Hat Security Advisory: OpenShift Container Platform 4.20.24 packages and security update","vulnerabilityIds":["CVE-2025-58183","CVE-2026-46333"]},{"id":"RHSA-2026:30650","title":"Red Hat Security Advisory: multicluster engine for Kubernetes v2.8.8 security update","vulnerabilityIds":["CVE-2025-47914","CVE-2025-58183","CVE-2026-33747","CVE-2026-33748","CVE-2026-34986","CVE-2026-35206","CVE-2026-39821","CVE-2026-44486","CVE-2026-44487","CVE-2026-44488","CVE-2026-44492","CVE-2026-44494","CVE-2026-44495","CVE-2026-44496","CVE-2026-46595"]},{"id":"RHSA-2025:22899","title":"Red Hat Security Advisory: golang security update","vulnerabilityIds":["CVE-2025-47906","CVE-2025-58183"]},{"id":"RHSA-2026:4434","title":"Red Hat Security Advisory: OpenShift Container Platform 4.19.26 bug fix and security update","vulnerabilityIds":["CVE-2025-47907","CVE-2025-58183","CVE-2025-61726","CVE-2025-61728","CVE-2025-61729","CVE-2025-61731","CVE-2025-61732","CVE-2025-65637","CVE-2026-22797"]},{"id":"RHSA-2026:5086","title":"Red Hat Security Advisory: OpenShift Container Platform 4.14.63 packages and security update","vulnerabilityIds":["CVE-2025-58183"]},{"id":"RHSA-2025:23746","title":"Red Hat Security Advisory: grafana security update","vulnerabilityIds":["CVE-2025-58183"]},{"id":"RHSA-2025:22011","title":"Red Hat Security Advisory: buildah security update","vulnerabilityIds":["CVE-2025-52881","CVE-2025-58183"]},{"id":"RHSA-2026:4482","title":"Red Hat Security Advisory: OpenShift Container Platform 4.16.58 bug fix and security update","vulnerabilityIds":["CVE-2025-47907","CVE-2025-58183","CVE-2025-65637"]},{"id":"RHSA-2026:4418","title":"Red Hat Security Advisory: OpenShift Container Platform 4.15.62 packages and security update","vulnerabilityIds":["CVE-2025-58183","CVE-2025-65637"]},{"id":"RHSA-2026:0424","title":"Red Hat Security Advisory: podman security update","vulnerabilityIds":["CVE-2025-52881","CVE-2025-58183"]},{"id":"RHSA-2026:5394","title":"Red Hat Security Advisory: Red Hat OpenStack Platform 17.1 director Operator container images","vulnerabilityIds":["CVE-2025-58183","CVE-2025-61726","CVE-2025-61729","CVE-2025-68121"]},{"id":"RHSA-2026:1381","title":"Red Hat Security Advisory: osbuild-composer security update","vulnerabilityIds":["CVE-2025-58183"]},{"id":"RHSA-2026:8229","title":"Red Hat Security Advisory: Red Hat Advanced Cluster Management for Kubernetes v2.13.6 security update","vulnerabilityIds":["CVE-2025-13465","CVE-2025-58183","CVE-2025-61726","CVE-2025-61728","CVE-2026-21721","CVE-2026-22029","CVE-2026-25639"]},{"id":"RHSA-2025:21778","title":"Red Hat Security Advisory: golang security update","vulnerabilityIds":["CVE-2025-58183"]},{"id":"RHSA-2025:21816","title":"Red Hat Security Advisory: delve and golang security update","vulnerabilityIds":["CVE-2025-58183"]},{"id":"RHSA-2025:23325","title":"Red Hat Security Advisory: podman security update","vulnerabilityIds":["CVE-2025-58183"]},{"id":"RHSA-2026:0671","title":"Red Hat Security Advisory: Assisted Installer RHEL 9 components for Multicluster Engine for Kubernetes 2.8.4","vulnerabilityIds":["CVE-2025-58183"]},{"id":"RHSA-2025:21856","title":"Red Hat Security Advisory: golang security update","vulnerabilityIds":["CVE-2025-47906","CVE-2025-58183"]},{"id":"RHSA-2026:6191","title":"Red Hat Security Advisory: container-tools:rhel8 security update","vulnerabilityIds":["CVE-2025-58183","CVE-2025-65637"]},{"id":"RHSA-2025:23374","title":"Red Hat Security Advisory: container-tools:rhel8 security update","vulnerabilityIds":["CVE-2025-58183"]},{"id":"RHSA-2026:3905","title":"Red Hat Security Advisory: OpenShift Container Platform 4.18.35 bug fix and security update","vulnerabilityIds":["CVE-2025-47907","CVE-2025-58183","CVE-2025-61726","CVE-2025-61729"]},{"id":"RHSA-2026:3108","title":"Red Hat Security Advisory: Red Hat OpenShift Service Mesh 3.1.5","vulnerabilityIds":["CVE-2025-58183","CVE-2025-61729"]}],"note":"EUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON."},"key":"euvd:EUVD-2025-36731","identifiers":["EUVD-2025-36731","CVE-2025-58183","GHSA-9gcr-gp5f-jw27"]},"retained":false,"historicalAffected":[]},{"revision":"ce009ad73cc14287bab80ef94c992c8a","observedAt":"2026-10-25T03:17:18.142+00:00","statement":{"source":"nvd","id":"CVE-2025-58183","aliases":[],"title":"tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files. A maliciously-crafted archive containing a large number of sparse regions can cause a Reader to read an unbounded amount of d…","description":"tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files. A maliciously-crafted archive containing a large number of sparse regions can cause a Reader to read an unbounded amount of data from the archive into memory. When reading from a compressed source, a small compressed input can result in large allocations.","state":0,"publishedAt":"2025-10-29T23:16:19.357+00:00","modifiedAt":"2026-10-08T10:10:00.227+00:00","affected":[],"metrics":[{"system":"CVSS 3.1 · 134c704f-9b21-4f2e-91b3-4a467353bcc0 · Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","score":4.3,"severity":"MEDIUM"}],"references":["https://go.dev/cl/709861","https://go.dev/issue/75677","https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI","https://pkg.go.dev/vuln/GO-2025-4014","http://www.openwall.com/lists/oss-security/2025/10/08/1"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-58183","license":"NIST NVD usage terms; underlying source attribution retained","enrichment":{"sourceStatus":"Deferred","weaknesses":[],"productCriteria":[],"sourceDates":{"published":"2025-10-29T23:16:19.357","lastModified":"2026-10-08T10:10:00.227"},"relatedAdvisories":[],"note":"NVD analysis and CPE criteria are source context, not proof that a package or your environment is affected. Complete affected data, logical configurations and SSVC are retained in the original JSON."},"key":"nvd:CVE-2025-58183","identifiers":["CVE-2025-58183"]},"retained":false,"historicalAffected":[]},{"revision":"d8469a2fa6794fdab8ef800f6ef133b5","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GO-2025-4014","aliases":["BIT-golang-2025-58183","CVE-2025-58183"],"title":"Unbounded allocation when parsing GNU sparse map in archive/tar","description":"tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files. A maliciously-crafted archive containing a large number of sparse regions can cause a Reader to read an unbounded amount of data from the archive into memory. When reading from a compressed source, a small compressed input can result in large allocations.","state":0,"publishedAt":"2025-10-29T21:51:04+00:00","modifiedAt":"2026-10-02T10:41:44.2214367+00:00","affected":[{"ecosystem":"Go","name":"stdlib","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"},{"kind":"fixed","version":"1.24.8"},{"kind":"introduced","version":"1.25.0"},{"kind":"fixed","version":"1.25.2"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://go.dev/cl/709861","https://go.dev/issue/75677","https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI"],"sourceUrl":"https://osv.dev/vulnerability/GO-2025-4014","license":"OSV · upstream source license applies","key":"osv:GO-2025-4014","identifiers":["GO-2025-4014","BIT-golang-2025-58183","CVE-2025-58183"]},"retained":false,"historicalAffected":[]}],"coverage":[{"source":"cisa-kev:global","scope":"Complete CISA KEV catalog; all vendors. Missing entries do not establish absence of exploitation.","generation":"2026-11-11T09:57:43.3267414+00:00","complete":true,"records":1779,"lastAttemptAt":"2026-11-11T09:57:43.3267414+00:00","lastSuccessAt":"2026-11-11T09:57:46.3036784+00:00","error":null,"lastVerifiedAt":"2026-11-11T09:57:46.3038639+00:00","snapshotPublishedAt":null,"importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"cve-program","scope":"Official CVE Program baseline and cumulative hourly delta; all vendors, published and rejected records","generation":"cve-de3b77103708811b6494d2ff7c979037d73ae579742cd1649a5c765137ae5083-f19af5e22c13aa688d23829fe96c281d0deaf6cf2f8cee6748f54f5a479127b2","complete":true,"records":424021,"lastAttemptAt":"2026-11-11T09:57:38.9264743+00:00","lastSuccessAt":"2026-11-11T09:25:54.5258746+00:00","error":null,"lastVerifiedAt":"2026-11-11T09:57:38.9264743+00:00","snapshotPublishedAt":"2026-11-11T09:25:28+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"euvd","scope":"Rolling EUVD lookups of CVE aliases in current public OSV archives; 500 identifiers per refresh, rechecked after 48 hours. Not a global EUVD catalog. Successful not-found lookups count as checked; they do not imply withdrawal or safety. No reader inventory is sent.","generation":"enrichment-f581ef223ba240a69a1abcff00ee4876","complete":true,"records":13758,"lastAttemptAt":"2026-11-11T09:58:42.1822037+00:00","lastSuccessAt":"2026-11-11T09:58:42.065+00:00","error":null,"lastVerifiedAt":"2026-11-11T09:58:42.065+00:00","snapshotPublishedAt":null,"importing":false,"stagedRecords":0,"checkedIdentifiers":13812,"expectedIdentifiers":13812,"failedIdentifiers":0},{"source":"first-epss:nuget","scope":"FIRST EPSS for explicit CVE aliases in the collected public NuGet archive. Not a global EPSS backfill.","generation":"2026-11-11T09:57:43.3267414+00:00","complete":true,"records":1097,"lastAttemptAt":"2026-11-11T09:57:43.3267414+00:00","lastSuccessAt":"2026-11-11T09:57:52.273871+00:00","error":null,"lastVerifiedAt":"2026-11-11T09:57:52.273872+00:00","snapshotPublishedAt":null,"importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"nvd","scope":"Rolling NVD lookups of CVE aliases in current public OSV archives; 500 identifiers per refresh, rechecked after 48 hours. Not a global NVD catalog. Successful not-found lookups count as checked; they do not imply withdrawal or safety. No reader inventory is sent.","generation":"enrichment-304fa97221904da4b3dcd306fc4b8a4b","complete":true,"records":13752,"lastAttemptAt":"2026-11-11T09:57:53.9573384+00:00","lastSuccessAt":"2026-11-11T09:26:01.454+00:00","error":null,"lastVerifiedAt":"2026-11-11T09:26:01.454+00:00","snapshotPublishedAt":null,"importing":false,"stagedRecords":0,"checkedIdentifiers":13812,"expectedIdentifiers":13812,"failedIdentifiers":0},{"source":"osv:Go","scope":"Complete OSV Go ecosystem archive, including withdrawn and malicious-package source records; statement counts are not unique CVE counts","generation":"go-3562b6c78fd1bd0f0b55daf66a0926ae24f65e462df7f6d928caad458fc696bf","complete":true,"records":9947,"lastAttemptAt":"2026-11-11T09:57:42.4406155+00:00","lastSuccessAt":"2026-11-11T04:27:43.6877707+00:00","error":null,"lastVerifiedAt":"2026-11-11T09:57:42.4406155+00:00","snapshotPublishedAt":"2026-11-11T03:32:46+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"osv:NuGet","scope":"Complete OSV NuGet ecosystem archive, including GitHub Advisory Database records; NuGet version matching only","generation":"nuget-456002455e0ab94bb92c95476d4e6d175c104cd594749982afd96c893728ecbc","complete":true,"records":2010,"lastAttemptAt":"2026-11-11T09:57:39.9639043+00:00","lastSuccessAt":"2026-11-11T02:36:58.1276999+00:00","error":null,"lastVerifiedAt":"2026-11-11T09:57:39.9639043+00:00","snapshotPublishedAt":"2026-11-11T01:17:51+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"osv:crates.io","scope":"Complete OSV crates.io ecosystem archive, including withdrawn and malicious-package source records; statement counts are not unique CVE counts","generation":"crates.io-2bc186fc4a8179fd66d765079d475b0b8e3af9f89b57dcc310e7773ded48b2cc","complete":true,"records":3088,"lastAttemptAt":"2026-11-11T09:57:43.196106+00:00","lastSuccessAt":"2026-11-11T09:25:59.9234294+00:00","error":null,"lastVerifiedAt":"2026-11-11T09:57:43.196106+00:00","snapshotPublishedAt":"2026-11-11T09:02:55+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"osv:npm","scope":"Complete OSV npm ecosystem archive, including withdrawn and malicious-package source records; statement counts are not unique CVE counts","generation":"npm-085e065fc9050ae18408f7e722c39653aeb186872334d7b3ec1fcafb7ed43d25","complete":true,"records":231665,"lastAttemptAt":"2026-11-11T09:57:41.7897107+00:00","lastSuccessAt":"2026-11-11T08:27:45.2700102+00:00","error":null,"lastVerifiedAt":"2026-11-11T09:57:41.7897107+00:00","snapshotPublishedAt":"2026-11-11T07:32:59+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null}]}