{"id":"GO-2025-3527","revision":"2a117fe34ea0426cb5efa00bbbbb1b68","records":[{"revision":"2a117fe34ea0426cb5efa00bbbbb1b68","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GO-2025-3527","aliases":["CVE-2025-0495","GHSA-m4gq-fm9h-8q75"],"title":"buildx allows a possible credential leakage to telemetry endpoint in github.com/docker/buildx","description":"buildx allows a possible credential leakage to telemetry endpoint in github.com/docker/buildx","state":0,"publishedAt":"2025-03-18T18:14:48+00:00","modifiedAt":"2026-02-04T02:54:48.132901+00:00","affected":[{"ecosystem":"Go","name":"github.com/docker/buildx","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"},{"kind":"fixed","version":"0.21.3"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://github.com/docker/buildx/security/advisories/GHSA-m4gq-fm9h-8q75","https://nvd.nist.gov/vuln/detail/CVE-2025-0495","https://github.com/docker/buildx/commit/18ccba072076ddbfb0aeedd6746d7719b0729b58"],"sourceUrl":"https://osv.dev/vulnerability/GO-2025-3527","license":"OSV · upstream source license applies","key":"osv:GO-2025-3527","identifiers":["GO-2025-3527","CVE-2025-0495","GHSA-m4gq-fm9h-8q75"]},"retained":false,"historicalAffected":[]}],"coverage":[]}