{"id":"GO-2025-4112","revision":"2c97bada5cbe41b7a77de7f10dc69e71","records":[{"revision":"2c97bada5cbe41b7a77de7f10dc69e71","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GO-2025-4112","aliases":["CVE-2025-64186","GHSA-88h9-77c7-p6w4"],"title":"Evervault Go SDK: Incomplete PCR Validation in Enclave Attestation for non-Evervault hosted Enclaves in github.com/evervault/evervault-go","description":"Evervault Go SDK: Incomplete PCR Validation in Enclave Attestation for non-Evervault hosted Enclaves in github.com/evervault/evervault-go","state":0,"publishedAt":"2025-11-17T19:11:23+00:00","modifiedAt":"2026-03-03T04:57:35.388513+00:00","affected":[{"ecosystem":"Go","name":"github.com/evervault/evervault-go","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"},{"kind":"fixed","version":"1.3.2"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://github.com/evervault/evervault-go/security/advisories/GHSA-88h9-77c7-p6w4","https://nvd.nist.gov/vuln/detail/CVE-2025-64186","https://github.com/evervault/evervault-go/commit/7c824d289bba11ec0bea46a338023f5b128bbb28","https://github.com/evervault/evervault-go/pull/48"],"sourceUrl":"https://osv.dev/vulnerability/GO-2025-4112","license":"OSV · upstream source license applies","key":"osv:GO-2025-4112","identifiers":["GO-2025-4112","CVE-2025-64186","GHSA-88h9-77c7-p6w4"]},"retained":false,"historicalAffected":[]}],"coverage":[]}