Every CVE Search/ Get API key

CVE-2025-297850

golang-github-teddysun-v2ray-plugin-5.25.0-1.1 on GA media

No scoreFix available

These are all security issues fixed in the golang-github-teddysun-v2ray-plugin-5.25.0-1.1 package on the GA media of openSUSE Tumbleweed.

What each source reports

OSVopenSUSE-SU-2025:15193-1 No score

golang-github-teddysun-v2ray-plugin-5.25.0-1.1 on GA media

These are all security issues fixed in the golang-github-teddysun-v2ray-plugin-5.25.0-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2025:15193-1
Updated
2026-11-02
OSVopenSUSE-SU-2025:15195-1 No score

golang-github-v2fly-v2ray-core-5.33.0-1.1 on GA media

These are all security issues fixed in the golang-github-v2fly-v2ray-core-5.33.0-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2025:15195-1
Updated
2026-11-02
OSVopenSUSE-SU-2025:20128-1 No score

Security update for shadowsocks-v2ray-plugin, v2ray-core

This update for shadowsocks-v2ray-plugin, v2ray-core fixes the following issues:

Changes in shadowsocks-v2ray-plugin:

  • Update version to 5.25.0
    • Update v2ray-core to v5.25.0
  • Add update-vendor.patch, update v2ray-core to v5.33.0 (boo#1243954 and CVE-2025-297850)

Changes in v2ray-core:

  • Fix CVE-2025-47911 and boo#1251404

    • Add fix-CVE-2025-47911.patch
    • Update golang.org/x/net to 0.45.0 in vendor
  • Update version to 5.38.0

    • TLSMirror Connection Enrollment System
    • Add TLSMirror Sequence Watermarking
    • LSMirror developer preview protocol is now a part of mainline V2Ray
    • proxy dns with NOTIMP error
    • Add TLSMirror looks like TLS censorship resistant transport protocol as a developer preview transport
    • proxy dns with NOTIMP error
    • fix false success from SOCKS server when Dispatch() fails
    • HTTP inbound: Directly forward plain HTTP 1xx response header
    • add a option to override domain used to query https record
    • Fix bugs
    • Update vendor
  • Update version to 5.33.0

    • bump github.com/quic-go/quic-go from 0.51.0 to 0.52.0(boo#1243946 and CVE-2025-297850)
    • Update other vendor source
  • Update version to 5.31.0

    • Add Dns Proxy Response TTL Control
    • Fix call newError Base with a nil value error
    • Update vendor (boo#1235164)
  • Update version to 5.29.3

    • Enable restricted mode load for http protocol client
    • Correctly implement QUIC sniffer when handling multiple initial packets
    • Fix unreleased cache buffer in QUIC sniffing
    • A temporary testing fix for the buffer corruption issue
    • QUIC Sniffer Restructure
  • Update version to 5.22.0

    • Add packetEncoding for Hysteria
    • Add ECH Client Support
    • Add support for parsing some shadowsocks links
    • Add Mekya Transport
    • Fix bugs
Record
openSUSE-SU-2025:20128-1
Updated
2026-11-02

Affected packages

Affected packages
PackageAffectedFixed
shadowsocks-v2ray-plugin
openSUSE:Tumbleweed
before 5.25.0-1.1
5.25.0-1.1
v2ray-core
openSUSE:Tumbleweed
before 5.33.0-1.1
5.33.0-1.1
shadowsocks-v2ray-plugin
openSUSE:Leap 16.0
From an advisory covering 2 CVEs
before 5.25.0-bp160.1.1
5.25.0-bp160.1.1
v2ray-core
openSUSE:Leap 16.0
From an advisory covering 2 CVEs
before 5.40.0-bp160.1.1
5.40.0-bp160.1.1

History

History
RecordedChangedSources
affected, facts
first indexedOSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2025-297850 is a vulnerability with no CVSS score yet in shadowsocks-v2ray-plugin, published June 2, 2025. No source lists public exploit code. Fixed in shadowsocks-v2ray-plugin 5.25.0-1.1.

References

MoveEnter Open