{"id":"GO-2025-4003","revision":"63a06758422443fdbbafe4b8386f943f","records":[{"revision":"63a06758422443fdbbafe4b8386f943f","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GO-2025-4003","aliases":["CVE-2025-54286","GHSA-p8hw-rfjg-689h"],"title":"CSRF Vulnerability When Using Client Certificate Authentication with the LXD-UI in github.com/canonical/lxd","description":"CSRF Vulnerability When Using Client Certificate Authentication with the LXD-UI in github.com/canonical/lxd","state":0,"publishedAt":"2025-11-05T18:41:07+00:00","modifiedAt":"2025-11-05T19:57:41.632442+00:00","affected":[{"ecosystem":"Go","name":"github.com/canonical/lxd","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://github.com/canonical/lxd/security/advisories/GHSA-p8hw-rfjg-689h"],"sourceUrl":"https://osv.dev/vulnerability/GO-2025-4003","license":"OSV · upstream source license applies","key":"osv:GO-2025-4003","identifiers":["GO-2025-4003","CVE-2025-54286","GHSA-p8hw-rfjg-689h"]},"retained":false,"historicalAffected":[]}],"coverage":[]}