{"id":"GO-2025-3989","revision":"c061c956f54a471f900987652a4cf322","records":[{"revision":"c061c956f54a471f900987652a4cf322","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GO-2025-3989","aliases":["CVE-2025-59941","GHSA-7pq9-rf9p-wcrf"],"title":"go-f3 Vulnerable to Cached Justification Verification Bypass in github.com/filecoin-project/go-f3","description":"go-f3 Vulnerable to Cached Justification Verification Bypass in github.com/filecoin-project/go-f3","state":0,"publishedAt":"2025-10-23T16:25:09+00:00","modifiedAt":"2026-03-03T04:56:57.687896+00:00","affected":[{"ecosystem":"Go","name":"github.com/filecoin-project/go-f3","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"},{"kind":"fixed","version":"0.8.9"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://github.com/filecoin-project/go-f3/security/advisories/GHSA-7pq9-rf9p-wcrf","https://nvd.nist.gov/vuln/detail/CVE-2025-59941","https://github.com/filecoin-project/go-f3/commit/76fff18cf07b21baccf537024bdb2fb41f75f6e2#diff-e1f646cea41790e1642e4e649c9e3c526344736d67222201703e1c29c23e9625"],"sourceUrl":"https://osv.dev/vulnerability/GO-2025-3989","license":"OSV · upstream source license applies","key":"osv:GO-2025-3989","identifiers":["GO-2025-3989","CVE-2025-59941","GHSA-7pq9-rf9p-wcrf"]},"retained":false,"historicalAffected":[]}],"coverage":[]}