{"id":"GO-2025-4000","revision":"afc6912b44f94077b14d399fb2f5a1ac","records":[{"revision":"afc6912b44f94077b14d399fb2f5a1ac","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GO-2025-4000","aliases":["CVE-2025-54293","GHSA-472f-vmf2-pr3h"],"title":"Canonical LXD Path Traversal Vulnerability in Instance Log File Retrieval Function in github.com/canonical/lxd","description":"Canonical LXD Path Traversal Vulnerability in Instance Log File Retrieval Function in github.com/canonical/lxd","state":0,"publishedAt":"2025-11-05T18:41:07+00:00","modifiedAt":"2025-11-05T19:57:35.603815+00:00","affected":[{"ecosystem":"Go","name":"github.com/canonical/lxd","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0.0.0-20200331193331-03aab09f5b5c"},{"kind":"fixed","version":"0.0.0-20250224180022-ec09b24179f3"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://github.com/canonical/lxd/security/advisories/GHSA-472f-vmf2-pr3h","https://github.com/canonical/lxd/pull/15022"],"sourceUrl":"https://osv.dev/vulnerability/GO-2025-4000","license":"OSV · upstream source license applies","key":"osv:GO-2025-4000","identifiers":["GO-2025-4000","CVE-2025-54293","GHSA-472f-vmf2-pr3h"]},"retained":false,"historicalAffected":[]}],"coverage":[]}