Every CVE Search/ Get API key

CVE-2025-58190

Infinite parsing loop in golang.org/x/net

5.3 MediumFix available

The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
Low

Exploit likelihood

0.54%Up 0.5 points since Feb 6, 2026
90%50%10%1%

What each source reports

NVD Score used 5.3

The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.

Record
CVE-2025-58190
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Weakness
CWE-835
Updated
2026-11-02
CVE List 5.3

Infinite parsing loop in golang.org/x/net

The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.

Record
CVE-2025-58190
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated
2026-11-02
EUVDEUVD-2025-206855 5.3

The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.

Record
EUVD-2025-206855
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated
2026-11-02
OSVBELL-CVE-2025-58190 5.3

CVE-2025-58190 does not affect BellSoft software

Record
BELL-CVE-2025-58190
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated
2026-11-02
OSV 5.3

The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.

Record
CVE-2025-58190
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated
2026-11-02
OSVDEBIAN-CVE-2025-58190 5.3

The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.

Record
DEBIAN-CVE-2025-58190
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated
2026-11-02
Show 47 moreShow less
OSVRHSA-2026:7291 8.8

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Record
RHSA-2026:7291
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L
Updated
2026-11-02
OSVRHSA-2026:7385 8.8

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Record
RHSA-2026:7385
CVSS 3.1
8.8 HighCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2025-58190 5.3

The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.

Record
UBUNTU-CVE-2025-58190
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated
2026-11-02
OSVAZL-76788 No score

CVE-2025-58190 affecting package podman 4.1.1-26

The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.

Record
AZL-76788
Updated
2026-11-02
OSVAZL-76790 No score

CVE-2025-58190 affecting package azl-otel-collector 0.127.0-1

The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.

Record
AZL-76790
Updated
2026-11-05
OSVAZL-76799 No score

CVE-2025-58190 affecting package cri-o 1.30.1-1

The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.

Record
AZL-76799
Updated
2026-11-05
OSVAZL-76805 No score

CVE-2025-58190 affecting package podman 5.6.1-10

The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.

Record
AZL-76805
Updated
2026-11-05
OSVAZL-76811 No score

CVE-2025-58190 affecting package yq 4.45.1-1

The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.

Record
AZL-76811
Updated
2026-11-05
OSVAZL-76827 No score

CVE-2025-58190 affecting package cert-manager for versions less than 1.11.2-27

The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.

Record
AZL-76827
Updated
2026-11-02
OSVAZL-76839 No score

CVE-2025-58190 affecting package cni-plugins for versions less than 1.3.0-11

The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.

Record
AZL-76839
Updated
2026-11-02
OSVAZL-76851 No score

CVE-2025-58190 affecting package cri-tools for versions less than 1.29.0-9

The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.

Record
AZL-76851
Updated
2026-11-02
OSVAZL-76856 No score

CVE-2025-58190 affecting package application-gateway-kubernetes-ingress for versions less than 1.7.7-3

The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.

Record
AZL-76856
Updated
2026-11-05
OSVAZL-76874 No score

CVE-2025-58190 affecting package cert-manager for versions less than 1.12.15-6

The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.

Record
AZL-76874
Updated
2026-11-05
OSVAZL-76878 No score

CVE-2025-58190 affecting package helm for versions less than 3.14.2-10

The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.

Record
AZL-76878
Updated
2026-11-02
OSVAZL-76880 No score

CVE-2025-58190 affecting package cf-cli for versions less than 8.7.11-5

The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.

Record
AZL-76880
Updated
2026-11-05
OSVAZL-76889 No score

CVE-2025-58190 affecting package cloud-provider-kubevirt for versions less than 0.5.1-3

The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.

Record
AZL-76889
Updated
2026-11-05
OSVAZL-76901 No score

CVE-2025-58190 affecting package cni-plugins for versions less than 1.4.0-5

The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.

Record
AZL-76901
Updated
2026-11-05
OSVAZL-76907 No score

CVE-2025-58190 affecting package containerd2 for versions less than 2.0.0-18

The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.

Record
AZL-76907
Updated
2026-11-02
OSVAZL-76913 No score

CVE-2025-58190 affecting package containerized-data-importer for versions less than 1.62.0-2

The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.

Record
AZL-76913
Updated
2026-11-05
OSVAZL-76919 No score

CVE-2025-58190 affecting package cri-tools for versions less than 1.32.0-4

The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.

Record
AZL-76919
Updated
2026-11-05
OSVAZL-76925 No score

CVE-2025-58190 affecting package dasel for versions less than 2.8.1-3

The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.

Record
AZL-76925
Updated
2026-11-05
OSVAZL-76931 No score

CVE-2025-58190 affecting package docker-buildx for versions less than 0.14.0-10

The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.

Record
AZL-76931
Updated
2026-11-05
OSVAZL-76937 No score

CVE-2025-58190 affecting package docker-compose for versions less than 2.27.0-8

The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.

Record
AZL-76937
Updated
2026-11-02
OSVAZL-76947 No score

CVE-2025-58190 affecting package kubernetes for versions less than 1.28.4-25

The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.

Record
AZL-76947
Updated
2026-11-02
OSVAZL-76958 No score

CVE-2025-58190 affecting package gh for versions less than 2.62.0-13

The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.

Record
AZL-76958
Updated
2026-11-02
OSVAZL-76965 No score

CVE-2025-58190 affecting package multus for versions less than 4.0.2-10

The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.

Record
AZL-76965
Updated
2026-11-02
OSVAZL-76980 No score

CVE-2025-58190 affecting package packer for versions less than 1.9.5-18

The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.

Record
AZL-76980
Updated
2026-11-02
OSVAZL-76988 No score

CVE-2025-58190 affecting package influxdb for versions less than 2.7.5-13

The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.

Record
AZL-76988
Updated
2026-11-02
OSVAZL-77000 No score

CVE-2025-58190 affecting package keda for versions less than 2.14.1-11

The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.

Record
AZL-77000
Updated
2026-11-02
OSVAZL-77010 No score

CVE-2025-58190 affecting package kube-vip-cloud-provider for versions less than 0.0.10-5

The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.

Record
AZL-77010
Updated
2026-11-02
OSVAZL-77013 No score

CVE-2025-58190 affecting package kubernetes for versions less than 1.30.10-21

The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.

Record
AZL-77013
Updated
2026-11-05
OSVAZL-77021 No score

CVE-2025-58190 affecting package kubevirt for versions less than 1.7.0-3

The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.

Record
AZL-77021
Updated
2026-11-02
OSVAZL-77040 No score

CVE-2025-58190 affecting package multus for versions less than 4.0.2-7

The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.

Record
AZL-77040
Updated
2026-11-05
OSVAZL-77049 No score

CVE-2025-58190 affecting package sriov-network-device-plugin for versions less than 3.6.2-11

The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.

Record
AZL-77049
Updated
2026-11-02
OSVAZL-77055 No score

CVE-2025-58190 affecting package telegraf for versions less than 1.29.4-21

The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.

Record
AZL-77055
Updated
2026-11-02
OSVAZL-77064 No score

CVE-2025-58190 affecting package packer for versions less than 1.9.5-13

The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.

Record
AZL-77064
Updated
2026-11-02
OSVAZL-77073 No score

CVE-2025-58190 affecting package prometheus-adapter for versions less than 0.12.0-5

The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.

Record
AZL-77073
Updated
2026-11-05
OSVAZL-77085 No score

CVE-2025-58190 affecting package vitess for versions less than 17.0.7-14

The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.

Record
AZL-77085
Updated
2026-11-02
OSVAZL-77093 No score

CVE-2025-58190 affecting package sriov-network-device-plugin for versions less than 3.7.0-5

The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.

Record
AZL-77093
Updated
2026-11-02
OSVAZL-77102 No score

CVE-2025-58190 affecting package telegraf for versions less than 1.31.0-15

The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.

Record
AZL-77102
Updated
2026-11-02
OSVGO-2026-4441 No score

Infinite parsing loop in golang.org/x/net

The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.

Record
GO-2026-4441
Updated
2026-11-02
OSVopenSUSE-RU-2026:20010-1 No score

Recommended update for trivy

This update for trivy fixes the following issues:

  • Update to version 0.68.2:
    • release: v0.68.2 [release/v0.68] (#9950)
    • fix(deps): bump alpine from 3.22.1 to 3.23.0 [backport: release/v0.68] (#9949)
    • ci: enable check-latest for setup-go [backport: release/v0.68] (#9946)
Record
openSUSE-RU-2026:20010-1
Updated
2026-11-02
OSVopenSUSE-SU-2025:15607-1 No score

glow-2.1.1-2.1 on GA media

These are all security issues fixed in the glow-2.1.1-2.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2025:15607-1
Updated
2026-11-02
OSVopenSUSE-SU-2025:15616-1 No score

distrobuilder-3.2-4.1 on GA media

These are all security issues fixed in the distrobuilder-3.2-4.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2025:15616-1
Updated
2026-11-02
OSVopenSUSE-SU-2025:15617-1 No score

forgejo-12.0.4-2.1 on GA media

These are all security issues fixed in the forgejo-12.0.4-2.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2025:15617-1
Updated
2026-11-02
OSVopenSUSE-SU-2025:15618-1 No score

forgejo-longterm-11.0.6-2.1 on GA media

These are all security issues fixed in the forgejo-longterm-11.0.6-2.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2025:15618-1
Updated
2026-11-02
OSVopenSUSE-SU-2025:15619-1 No score

gitea-tea-0.11.0-2.1 on GA media

These are all security issues fixed in the gitea-tea-0.11.0-2.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2025:15619-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
podman
Azure Linux:2
 through 4.1.1-26 None known
azl-otel-collector
Azure Linux:3
 through 0.127.0-1 None known
cri-o
Azure Linux:3
 through 1.30.1-1 None known
podman
Azure Linux:3
 through 5.6.1-10 None known
yq
Azure Linux:3
 through 4.45.1-1 None known
cert-manager
Azure Linux:2
 before 1.11.2-27
1.11.2-27
cni-plugins
Azure Linux:2
 before 1.3.0-11
1.3.0-11
cri-tools
Azure Linux:2
 before 1.29.0-9
1.29.0-9
application-gateway-kubernetes-ingress
Azure Linux:3
 before 1.7.7-3
1.7.7-3
cert-manager
Azure Linux:3
 before 1.12.15-6
1.12.15-6
Show 181 moreShow less
Affected packages
PackageAffectedFixed
helm
Azure Linux:2
 before 3.14.2-10
3.14.2-10
cf-cli
Azure Linux:3
 before 8.7.11-5
8.7.11-5
cloud-provider-kubevirt
Azure Linux:3
 before 0.5.1-3
0.5.1-3
cni-plugins
Azure Linux:3
 before 1.4.0-5
1.4.0-5
containerd2
Azure Linux:3
 before 2.0.0-18
2.0.0-18
containerized-data-importer
Azure Linux:3
 before 1.62.0-2
1.62.0-2
cri-tools
Azure Linux:3
 before 1.32.0-4
1.32.0-4
dasel
Azure Linux:3
 before 2.8.1-3
2.8.1-3
docker-buildx
Azure Linux:3
 before 0.14.0-10
0.14.0-10
docker-compose
Azure Linux:3
 before 2.27.0-8
2.27.0-8
kubernetes
Azure Linux:2
 before 1.28.4-25
1.28.4-25
gh
Azure Linux:3
 before 2.62.0-13
2.62.0-13
multus
Azure Linux:2
 before 4.0.2-10
4.0.2-10
packer
Azure Linux:2
 before 1.9.5-18
1.9.5-18
influxdb
Azure Linux:3
 before 2.7.5-13
2.7.5-13
keda
Azure Linux:3
 before 2.14.1-11
2.14.1-11
kube-vip-cloud-provider
Azure Linux:3
 before 0.0.10-5
0.0.10-5
kubernetes
Azure Linux:3
 before 1.30.10-21
1.30.10-21
kubevirt
Azure Linux:3
 before 1.7.0-3
1.7.0-3
multus
Azure Linux:3
 before 4.0.2-7
4.0.2-7
sriov-network-device-plugin
Azure Linux:2
 before 3.6.2-11
3.6.2-11
telegraf
Azure Linux:2
 before 1.29.4-21
1.29.4-21
packer
Azure Linux:3
 before 1.9.5-13
1.9.5-13
prometheus-adapter
Azure Linux:3
 before 0.12.0-5
0.12.0-5
vitess
Azure Linux:2
 before 17.0.7-14
17.0.7-14
sriov-network-device-plugin
Azure Linux:3
 before 3.7.0-5
3.7.0-5
telegraf
Azure Linux:3
 before 1.31.0-15
1.31.0-15
golang-golang-x-net
Debian:12
 All versions, plus listed versions
1:0.10.0-11:0.11.0-11:0.14.0-11:0.15.0-11:0.15.0-2
Show 22 moreShow less
1:0.17.0+dfsg-11:0.19.0+dfsg-11:0.20.0+dfsg-11:0.21.0+dfsg-11:0.22.0+dfsg-11:0.23.0+dfsg-11:0.24.0+dfsg-11:0.25.0+dfsg-11:0.26.0+dfsg-11:0.26.0+dfsg-21:0.27.0-11:0.27.0-21:0.47.0-11:0.47.0-21:0.53.0-11:0.53.0-21:0.53.0-2~bpo13+11:0.55.0-11:0.56.0-11:0.57.0-11:0.58.0-11:0.7.0+dfsg-1
 None known
golang-golang-x-net
Debian:13
 All versions, plus listed versions
1:0.27.0-21:0.47.0-11:0.47.0-21:0.53.0-11:0.53.0-2
Show 5 moreShow less
1:0.53.0-2~bpo13+11:0.55.0-11:0.56.0-11:0.57.0-11:0.58.0-1
 None known
golang-golang-x-net
Debian:14
 before 1:0.47.0-1, plus listed versions
1:0.27.0-2
1:0.47.0-1
golang.org/x/net
Go
 before 0.45.0
0.45.0
golang1.26
Red Hat:hummingbird:1
From an advisory covering 40 CVEs
 before 0:1.26.2-1.hum1
0:1.26.2-1.hum1
golang1.26-bin
Red Hat:hummingbird:1
From an advisory covering 40 CVEs
 before 0:1.26.2-1.hum1
0:1.26.2-1.hum1
golang1.26-docs
Red Hat:hummingbird:1
From an advisory covering 40 CVEs
 before 0:1.26.2-1.hum1
0:1.26.2-1.hum1
golang1.26-misc
Red Hat:hummingbird:1
From an advisory covering 40 CVEs
 before 0:1.26.2-1.hum1
0:1.26.2-1.hum1
golang1.26-shared
Red Hat:hummingbird:1
From an advisory covering 40 CVEs
 before 0:1.26.2-1.hum1
0:1.26.2-1.hum1
golang1.26-src
Red Hat:hummingbird:1
From an advisory covering 40 CVEs
 before 0:1.26.2-1.hum1
0:1.26.2-1.hum1
golang1.26-tests
Red Hat:hummingbird:1
From an advisory covering 40 CVEs
 before 0:1.26.2-1.hum1
0:1.26.2-1.hum1
golang1.25
Red Hat:hummingbird:1
From an advisory covering 38 CVEs
 before 0:1.25.9-1.hum1
0:1.25.9-1.hum1
golang1.25-bin
Red Hat:hummingbird:1
From an advisory covering 38 CVEs
 before 0:1.25.9-1.hum1
0:1.25.9-1.hum1
golang1.25-docs
Red Hat:hummingbird:1
From an advisory covering 38 CVEs
 before 0:1.25.9-1.hum1
0:1.25.9-1.hum1
golang1.25-misc
Red Hat:hummingbird:1
From an advisory covering 38 CVEs
 before 0:1.25.9-1.hum1
0:1.25.9-1.hum1
golang1.25-shared
Red Hat:hummingbird:1
From an advisory covering 38 CVEs
 before 0:1.25.9-1.hum1
0:1.25.9-1.hum1
golang1.25-src
Red Hat:hummingbird:1
From an advisory covering 38 CVEs
 before 0:1.25.9-1.hum1
0:1.25.9-1.hum1
golang1.25-tests
Red Hat:hummingbird:1
From an advisory covering 38 CVEs
 before 0:1.25.9-1.hum1
0:1.25.9-1.hum1
golang.org/x/net
Root:Go
 before v0.42.0-aikido.3
v0.42.0-aikido.3v0.39.0-aikido.4v0.34.0-aikido.3v0.33.0-aikido.7v0.33.0-aikido.6v0.39.0-aikido.3v0.42.0-aikido.2v0.34.0-aikido.2v0.39.0-aikido.5v0.42.0-aikido.4v0.39.0-aikido.6
rootio-golang.org/x/net
Root:Go
 before v0.42.0-root.io.3
v0.42.0-root.io.3v0.39.0-root.io.4v0.34.0-root.io.3v0.33.0-root.io.7v0.33.0-root.io.6v0.39.0-root.io.3v0.42.0-root.io.2v0.34.0-root.io.2v0.39.0-root.io.5v0.42.0-root.io.4v0.39.0-root.io.6
helm
SUSE:Linux Micro 6.0
From an advisory covering 2 CVEs
 before 3.19.1-1.1
3.19.1-1.1
helm
SUSE:Linux Micro 6.1
From an advisory covering 2 CVEs
 before 3.19.1-slfo.1.1_1.1
3.19.1-slfo.1.1_1.1
helm
SUSE:Linux Enterprise Micro 5.5
From an advisory covering 3 CVEs
 before 3.19.1-150000.1.57.1
3.19.1-150000.1.57.1
helm
SUSE:Linux Enterprise Module for Containers 15 SP6
From an advisory covering 3 CVEs
 before 3.19.1-150000.1.57.1
3.19.1-150000.1.57.1
helm
SUSE:Linux Enterprise Module for Containers 15 SP7
From an advisory covering 3 CVEs
 before 3.19.1-150000.1.57.1
3.19.1-150000.1.57.1
helm
SUSE:Linux Enterprise Module for Package Hub 15 SP6
From an advisory covering 3 CVEs
 before 3.19.1-150000.1.57.1
3.19.1-150000.1.57.1
helm
SUSE:Linux Enterprise Module for Package Hub 15 SP7
From an advisory covering 3 CVEs
 before 3.19.1-150000.1.57.1
3.19.1-150000.1.57.1
helm
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
From an advisory covering 3 CVEs
 before 3.19.1-150000.1.57.1
3.19.1-150000.1.57.1
helm
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 3 CVEs
 before 3.19.1-150000.1.57.1
3.19.1-150000.1.57.1
helm
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 3 CVEs
 before 3.19.1-150000.1.57.1
3.19.1-150000.1.57.1
helm
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 3 CVEs
 before 3.19.1-150000.1.57.1
3.19.1-150000.1.57.1
helm
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
From an advisory covering 3 CVEs
 before 3.19.1-150000.1.57.1
3.19.1-150000.1.57.1
helm
SUSE:Linux Enterprise Server 15 SP3-LTSS
From an advisory covering 3 CVEs
 before 3.19.1-150000.1.57.1
3.19.1-150000.1.57.1
helm
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 3 CVEs
 before 3.19.1-150000.1.57.1
3.19.1-150000.1.57.1
helm
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 3 CVEs
 before 3.19.1-150000.1.57.1
3.19.1-150000.1.57.1
helm
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
From an advisory covering 3 CVEs
 before 3.19.1-150000.1.57.1
3.19.1-150000.1.57.1
helm
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 3 CVEs
 before 3.19.1-150000.1.57.1
3.19.1-150000.1.57.1
helm
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
From an advisory covering 3 CVEs
 before 3.19.1-150000.1.57.1
3.19.1-150000.1.57.1
helm
SUSE:Enterprise Storage 7.1
From an advisory covering 3 CVEs
 before 3.19.1-150000.1.57.1
3.19.1-150000.1.57.1
helm
openSUSE:Leap 15.6
From an advisory covering 3 CVEs
 before 3.19.1-150000.1.57.1
3.19.1-150000.1.57.1
Multi-Linux-ManagerTools-SLE-release
SUSE:Multi Linux Manager Tools SLE-12
From an advisory covering 4 CVEs
 before 12-120002.1.11.1
12-120002.1.11.1
grafana
SUSE:Multi Linux Manager Tools SLE-12
From an advisory covering 4 CVEs
 before 11.5.10-120002.4.6.1
11.5.10-120002.4.6.1
uyuni-tools
SUSE:Multi Linux Manager Tools SLE-12
From an advisory covering 4 CVEs
 before 5.1.23-120002.3.6.1
5.1.23-120002.3.6.1
grafana
SUSE:Multi Linux Manager Tools SLE-15
From an advisory covering 4 CVEs
 before 11.5.10-150002.4.6.1
11.5.10-150002.4.6.1
uyuni-tools
SUSE:Multi Linux Manager Tools SLE-15
From an advisory covering 4 CVEs
 before 5.1.23-150002.3.6.1
5.1.23-150002.3.6.1
uyuni-tools
SUSE:Multi Linux Manager Tools SLE-Micro-5
From an advisory covering 4 CVEs
 before 5.1.23-150002.3.6.1
5.1.23-150002.3.6.1
release-notes-susemanager-proxy
SUSE:Manager Proxy LTS 4.3
From an advisory covering 6 CVEs
 before 4.3.16.2-150400.3.104.2
4.3.16.2-150400.3.104.2
release-notes-susemanager
SUSE:Manager Server LTS 4.3
From an advisory covering 6 CVEs
 before 4.3.16.2-150400.3.148.1
4.3.16.2-150400.3.148.1
grafana
SUSE:Linux Enterprise Module for Package Hub 15 SP6
From an advisory covering 7 CVEs
 before 11.5.10-150200.3.80.1
11.5.10-150200.3.80.1
grafana
SUSE:Linux Enterprise Module for Package Hub 15 SP7
From an advisory covering 7 CVEs
 before 11.5.10-150200.3.80.1
11.5.10-150200.3.80.1
grafana
openSUSE:Leap 15.6
From an advisory covering 7 CVEs
 before 11.5.10-150200.3.80.1
11.5.10-150200.3.80.1
alloy
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 3 CVEs
 before 1.12.1-150700.15.12.1
1.12.1-150700.15.12.1
govulncheck-vulndb
openSUSE:Leap 15.6
From an advisory covering 76 CVEs
 before 0.0.20260205T172317-150000.1.146.1
0.0.20260205T172317-150000.1.146.1
apptainer
SUSE:Linux Enterprise Module for HPC 15 SP7
From an advisory covering 2 CVEs
 before 1.4.5-150600.4.15.1
1.4.5-150600.4.15.1
apptainer
openSUSE:Leap 15.6
From an advisory covering 2 CVEs
 before 1.4.5-150600.4.15.1
1.4.5-150600.4.15.1
alloy
SUSE:Linux Enterprise Server 16.0
From an advisory covering 3 CVEs
 before 1.12.1-160000.1.1
1.12.1-160000.1.1
alloy
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 3 CVEs
 before 1.12.1-160000.1.1
1.12.1-160000.1.1
elemental-register
SUSE:Linux Micro 6.2
From an advisory covering 6 CVEs
 before 1.8.1-160000.1.1
1.8.1-160000.1.1
elemental-toolkit
SUSE:Linux Micro 6.2
From an advisory covering 6 CVEs
 before 2.3.2-160000.1.1
2.3.2-160000.1.1
elemental-operator
SUSE:Linux Micro 6.0
From an advisory covering 6 CVEs
 before 1.6.10-1.1
1.6.10-1.1
elemental-toolkit
SUSE:Linux Micro 6.0
From an advisory covering 6 CVEs
 before 2.1.5-1.1
2.1.5-1.1
elemental-operator
SUSE:Linux Micro 6.1
From an advisory covering 6 CVEs
 before 1.7.4-slfo.1.1_1.1
1.7.4-slfo.1.1_1.1
elemental-toolkit
SUSE:Linux Micro 6.1
From an advisory covering 6 CVEs
 before 2.2.7-slfo.1.1_1.1
2.2.7-slfo.1.1_1.1
helm
SUSE:Linux Micro 6.2
From an advisory covering 2 CVEs
 before 3.19.1-160000.1.1
3.19.1-160000.1.1
elemental-operator
SUSE:Linux Micro 6.0
From an advisory covering 9 CVEs
 before 1.6.11-1.1
1.6.11-1.1
elemental-operator
SUSE:Linux Micro 6.1
From an advisory covering 9 CVEs
 before 1.7.5-slfo.1.1_1.1
1.7.5-slfo.1.1_1.1
google-osconfig-agent
SUSE:Linux Micro 6.0
From an advisory covering 23 CVEs
 before 20260615.01-1.1
20260615.01-1.1
google-osconfig-agent
SUSE:Linux Micro 6.1
From an advisory covering 22 CVEs
 before 20260615.01-slfo.1.1_1.1
20260615.01-slfo.1.1_1.1
google-osconfig-agent
SUSE:Linux Enterprise Server 16.0
From an advisory covering 22 CVEs
 before 20260615.01-160000.1.2
20260615.01-160000.1.2
google-osconfig-agent
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 22 CVEs
 before 20260615.01-160000.1.2
20260615.01-160000.1.2
kubevirt
SUSE:Linux Enterprise Module for Containers 15 SP7
From an advisory covering 7 CVEs
 before 1.7.4-150700.3.24.2
1.7.4-150700.3.24.2
kubevirt-1.6
SUSE:Linux Enterprise Module for Containers 15 SP7
From an advisory covering 7 CVEs
 before 1.6.6-150700.15.7.1
1.6.6-150700.15.7.1
containerized-data-importer
SUSE:Linux Enterprise Module for Containers 15 SP7
From an advisory covering 12 CVEs
 before 1.64.0-150700.9.11.1
1.64.0-150700.9.11.1
terraform-provider-aws
SUSE:Linux Enterprise Module for Public Cloud 15 SP4
From an advisory covering 41 CVEs
 before 3.11.0-150200.6.18.1
3.11.0-150200.6.18.1
terraform-provider-azurerm
SUSE:Linux Enterprise Module for Public Cloud 15 SP4
From an advisory covering 41 CVEs
 before 2.32.0-150200.6.12.1
2.32.0-150200.6.12.1
terraform-provider-external
SUSE:Linux Enterprise Module for Public Cloud 15 SP4
From an advisory covering 41 CVEs
 before 2.0.0-150200.6.12.1
2.0.0-150200.6.12.1
terraform-provider-google
SUSE:Linux Enterprise Module for Public Cloud 15 SP4
From an advisory covering 41 CVEs
 before 3.43.0-150200.6.12.1
3.43.0-150200.6.12.1
terraform-provider-helm
SUSE:Linux Enterprise Module for Public Cloud 15 SP4
From an advisory covering 41 CVEs
 before 2.9.0-150200.6.23.1
2.9.0-150200.6.23.1
terraform-provider-kubernetes
SUSE:Linux Enterprise Module for Public Cloud 15 SP4
From an advisory covering 41 CVEs
 before 1.13.2-150200.6.12.1
1.13.2-150200.6.12.1
terraform-provider-local
SUSE:Linux Enterprise Module for Public Cloud 15 SP4
From an advisory covering 41 CVEs
 before 2.0.0-150200.6.17.1
2.0.0-150200.6.17.1
terraform-provider-null
SUSE:Linux Enterprise Module for Public Cloud 15 SP4
From an advisory covering 41 CVEs
 before 3.0.0-150200.6.18.1
3.0.0-150200.6.18.1
terraform-provider-random
SUSE:Linux Enterprise Module for Public Cloud 15 SP4
From an advisory covering 41 CVEs
 before 3.0.0-150200.6.15.1
3.0.0-150200.6.15.1
terraform-provider-tls
SUSE:Linux Enterprise Module for Public Cloud 15 SP4
From an advisory covering 41 CVEs
 before 3.0.0-150200.5.15.1
3.0.0-150200.5.15.1
terraform-provider-aws
SUSE:Linux Enterprise Module for Public Cloud 15 SP5
From an advisory covering 41 CVEs
 before 3.11.0-150200.6.18.1
3.11.0-150200.6.18.1
terraform-provider-azurerm
SUSE:Linux Enterprise Module for Public Cloud 15 SP5
From an advisory covering 41 CVEs
 before 2.32.0-150200.6.12.1
2.32.0-150200.6.12.1
terraform-provider-external
SUSE:Linux Enterprise Module for Public Cloud 15 SP5
From an advisory covering 41 CVEs
 before 2.0.0-150200.6.12.1
2.0.0-150200.6.12.1
terraform-provider-google
SUSE:Linux Enterprise Module for Public Cloud 15 SP5
From an advisory covering 41 CVEs
 before 3.43.0-150200.6.12.1
3.43.0-150200.6.12.1
terraform-provider-helm
SUSE:Linux Enterprise Module for Public Cloud 15 SP5
From an advisory covering 41 CVEs
 before 2.9.0-150200.6.23.1
2.9.0-150200.6.23.1
terraform-provider-kubernetes
SUSE:Linux Enterprise Module for Public Cloud 15 SP5
From an advisory covering 41 CVEs
 before 1.13.2-150200.6.12.1
1.13.2-150200.6.12.1
terraform-provider-local
SUSE:Linux Enterprise Module for Public Cloud 15 SP5
From an advisory covering 41 CVEs
 before 2.0.0-150200.6.17.1
2.0.0-150200.6.17.1
terraform-provider-null
SUSE:Linux Enterprise Module for Public Cloud 15 SP5
From an advisory covering 41 CVEs
 before 3.0.0-150200.6.18.1
3.0.0-150200.6.18.1
terraform-provider-random
SUSE:Linux Enterprise Module for Public Cloud 15 SP5
From an advisory covering 41 CVEs
 before 3.0.0-150200.6.15.1
3.0.0-150200.6.15.1
terraform-provider-tls
SUSE:Linux Enterprise Module for Public Cloud 15 SP5
From an advisory covering 41 CVEs
 before 3.0.0-150200.5.15.1
3.0.0-150200.5.15.1
kubevirt-1.6
SUSE:Linux Enterprise Module for Containers 15 SP7
From an advisory covering 16 CVEs
 before 1.6.6-150700.15.17.1
1.6.6-150700.15.17.1
golang-golang-x-net-dev
Ubuntu:Pro:16.04:LTS
 before 1:0.0+git20160110.4fd4a9f-1ubuntu0.1~esm2, plus listed versions
0.0+git20150226.3d87fd6-30.0+git20151007.b846920+dfsg-11:0.0+git20150817.66f0418-11:0.0+git20160110.4fd4a9f-11:0.0+git20160110.4fd4a9f-1ubuntu0.1~esm1
1:0.0+git20160110.4fd4a9f-1ubuntu0.1~esm2
juju-core
Ubuntu:Pro:16.04:LTS
 before 2.3.7-0ubuntu0.16.04.1+esm2, plus listed versions
1.24.6-0ubuntu31.25.0-0ubuntu11.25.0-0ubuntu21.25.0-0ubuntu32.0~beta4-0ubuntu2
Show 11 moreShow less
2.0~beta6-0ubuntu1.16.04.12.0~beta7-0ubuntu1.16.04.12.0~beta12-0ubuntu1.16.04.12.0~beta15-0ubuntu2.16.04.12.0.0-0ubuntu0.16.04.22.0.2-0ubuntu0.16.04.12.0.2-0ubuntu0.16.04.22.3.1-0ubuntu0.16.04.12.3.2-0ubuntu0.16.04.12.3.7-0ubuntu0.16.04.12.3.7-0ubuntu0.16.04.1+esm1
2.3.7-0ubuntu0.16.04.1+esm2
lxd
Ubuntu:Pro:16.04:LTS
 before 2.0.11-0ubuntu1~16.04.4+esm2, plus listed versions
0.20-0ubuntu40.21-0ubuntu30.21-0ubuntu50.22-0ubuntu10.22-0ubuntu2
Show 45 moreShow less
0.23-0ubuntu10.23-0ubuntu20.23-0ubuntu30.24-0ubuntu20.24-0ubuntu30.24-0ubuntu40.25-0ubuntu10.26-0ubuntu20.26-0ubuntu30.27-0ubuntu10.27-0ubuntu22.0.0~beta1-0ubuntu32.0.0~beta1-0ubuntu42.0.0~beta2-0ubuntu12.0.0~beta2-0ubuntu22.0.0~beta3-0ubuntu12.0.0~beta3-0ubuntu22.0.0~beta3-0ubuntu32.0.0~beta3-0ubuntu42.0.0~beta4-0ubuntu12.0.0~beta4-0ubuntu22.0.0~beta4-0ubuntu32.0.0~beta4-0ubuntu42.0.0~beta4-0ubuntu52.0.0~beta4-0ubuntu62.0.0~beta4-0ubuntu72.0.0~rc1-0ubuntu12.0.0~rc1-0ubuntu22.0.0~rc1-0ubuntu32.0.0~rc2-0ubuntu22.0.0~rc2-0ubuntu32.0.0~rc3-0ubuntu12.0.0~rc3-0ubuntu22.0.0~rc3-0ubuntu32.0.0~rc3-0ubuntu42.0.0~rc4-0ubuntu12.0.0~rc5-0ubuntu12.0.0~rc6-0ubuntu12.0.0~rc6-0ubuntu22.0.0~rc7-0ubuntu12.0.0~rc7-0ubuntu22.0.0~rc8-0ubuntu12.0.0~rc8-0ubuntu22.0.0~rc8-0ubuntu32.0.0~rc8-0ubuntu5
2.0.11-0ubuntu1~16.04.4+esm2
lxd
Ubuntu:Pro:18.04:LTS
 before 3.0.3-0ubuntu1~18.04.2+esm2, plus listed versions
2.18-0ubuntu62.19-0ubuntu12.20-0ubuntu32.20-0ubuntu42.21-0ubuntu1
Show 16 moreShow less
2.21-0ubuntu22.21-0ubuntu32.21-0ubuntu43.0.0~beta2-0ubuntu33.0.0~beta3-0ubuntu33.0.0~beta5-0ubuntu23.0.0~beta7-0ubuntu13.0.0-0ubuntu13.0.0-0ubuntu23.0.0-0ubuntu33.0.0-0ubuntu43.0.1-0ubuntu1~18.04.13.0.2-0ubuntu1~18.04.13.0.3-0ubuntu1~18.04.13.0.3-0ubuntu1~18.04.23.0.3-0ubuntu1~18.04.2+esm1
3.0.3-0ubuntu1~18.04.2+esm2
golang-golang-x-net-dev
Ubuntu:Pro:18.04:LTS
 before 1:0.0+git20170629.c81e7f2+dfsg-2ubuntu0.1~esm2, plus listed versions
1:0.0+git20170629.c81e7f2+dfsg-1ubuntu11:0.0+git20170629.c81e7f2+dfsg-1ubuntu21:0.0+git20170629.c81e7f2+dfsg-21:0.0+git20170629.c81e7f2+dfsg-2ubuntu0.1~esm1
1:0.0+git20170629.c81e7f2+dfsg-2ubuntu0.1~esm2
golang-golang-x-net-dev
Ubuntu:Pro:20.04:LTS
 before 1:0.0+git20190811.74dc4d7+dfsg-1ubuntu0.1~esm2, plus listed versions
1:0.0+git20190811.74dc4d7+dfsg-11:0.0+git20190811.74dc4d7+dfsg-1ubuntu0.1~esm1
1:0.0+git20190811.74dc4d7+dfsg-1ubuntu0.1~esm2
golang-golang-x-net
Ubuntu:22.04:LTS
 before 1:0.0+git20211209.491a49a+dfsg-1ubuntu0.1, plus listed versions
1:0.0+git20210119.5f4716e+dfsg-41:0.0+git20210805.aaa1db6+dfsg-11:0.0+git20211209.491a49a+dfsg-1
1:0.0+git20211209.491a49a+dfsg-1ubuntu0.1
golang-golang-x-net
Ubuntu:Pro:22.04:LTS
 before 1:0.0+git20211209.491a49a+dfsg-1ubuntu0.1~esm2, plus listed versions
1:0.0+git20210119.5f4716e+dfsg-41:0.0+git20210805.aaa1db6+dfsg-11:0.0+git20211209.491a49a+dfsg-11:0.0+git20211209.491a49a+dfsg-1ubuntu0.1~esm1
1:0.0+git20211209.491a49a+dfsg-1ubuntu0.1~esm2
golang-golang-x-net
Ubuntu:Pro:24.04:LTS
 before 1:0.21.0+dfsg-1ubuntu0.1~esm2, plus listed versions
1:0.10.0-11:0.17.0+dfsg-11:0.20.0+dfsg-11:0.21.0+dfsg-11:0.21.0+dfsg-1ubuntu0.1~esm1
1:0.21.0+dfsg-1ubuntu0.1~esm2
golang-golang-x-net
Ubuntu:25.10
 All versions, plus listed versions
1:0.27.0-11:0.27.0-2
 None known
golang-golang-x-net
Ubuntu:26.10
 All versions, plus listed versions
1:0.27.0-21:0.57.0-11:0.58.0-1
 None known
golang-golang-x-net
Ubuntu:26.04:LTS
 All versions, plus listed versions
1:0.27.0-2
 None known
golang-golang-x-net
Ubuntu:Pro:22.04:LTS
From an advisory covering 6 CVEs
 before 1:0.0+git20211209.491a49a+dfsg-1ubuntu0.1~esm2, plus listed versions
1:0.0+git20210119.5f4716e+dfsg-41:0.0+git20210805.aaa1db6+dfsg-11:0.0+git20211209.491a49a+dfsg-11:0.0+git20211209.491a49a+dfsg-1ubuntu0.1~esm1
1:0.0+git20211209.491a49a+dfsg-1ubuntu0.1~esm2
golang-golang-x-net
Ubuntu:Pro:24.04:LTS
From an advisory covering 6 CVEs
 before 1:0.21.0+dfsg-1ubuntu0.1~esm2, plus listed versions
1:0.10.0-11:0.17.0+dfsg-11:0.20.0+dfsg-11:0.21.0+dfsg-11:0.21.0+dfsg-1ubuntu0.1~esm1
1:0.21.0+dfsg-1ubuntu0.1~esm2
golang-golang-x-net
Ubuntu:22.04:LTS
From an advisory covering 8 CVEs
 before 1:0.0+git20211209.491a49a+dfsg-1ubuntu0.1, plus listed versions
1:0.0+git20210119.5f4716e+dfsg-41:0.0+git20210805.aaa1db6+dfsg-11:0.0+git20211209.491a49a+dfsg-1
1:0.0+git20211209.491a49a+dfsg-1ubuntu0.1
glow
openSUSE:Tumbleweed
From an advisory covering 2 CVEs
 before 2.1.1-2.1
2.1.1-2.1
distrobuilder
openSUSE:Tumbleweed
From an advisory covering 2 CVEs
 before 3.2-4.1
3.2-4.1
forgejo
openSUSE:Tumbleweed
From an advisory covering 2 CVEs
 before 12.0.4-2.1
12.0.4-2.1
forgejo-longterm
openSUSE:Tumbleweed
From an advisory covering 2 CVEs
 before 11.0.6-2.1
11.0.6-2.1
gitea-tea
openSUSE:Tumbleweed
From an advisory covering 2 CVEs
 before 0.11.0-2.1
0.11.0-2.1
headscale
openSUSE:Tumbleweed
From an advisory covering 2 CVEs
 before 0.26.1-2.1
0.26.1-2.1
git-bug
openSUSE:Tumbleweed
From an advisory covering 2 CVEs
 before 0.10.1-2.1
0.10.1-2.1
grafana
openSUSE:Tumbleweed
From an advisory covering 2 CVEs
 before 11.6.7-1.1
11.6.7-1.1
google-osconfig-agent
openSUSE:Tumbleweed
From an advisory covering 2 CVEs
 before 20251028.00-1.1
20251028.00-1.1
go-sendxmpp
openSUSE:Tumbleweed
From an advisory covering 2 CVEs
 before 0.15.1-1.1
0.15.1-1.1
helm
openSUSE:Tumbleweed
From an advisory covering 2 CVEs
 before 3.19.1-1.1
3.19.1-1.1
sbctl
openSUSE:Tumbleweed
From an advisory covering 2 CVEs
 before 0.18-2.1
0.18-2.1
helm3
openSUSE:Tumbleweed
From an advisory covering 20 CVEs
 before 3.19.2-1.1
3.19.2-1.1
alloy
openSUSE:Tumbleweed
From an advisory covering 3 CVEs
 before 1.12.0-2.1
1.12.0-2.1
trivy
openSUSE:Tumbleweed
From an advisory covering 4 CVEs
 before 0.68.2-1.1
0.68.2-1.1
kepler
openSUSE:Tumbleweed
From an advisory covering 2 CVEs
 before 0.11.3-1.1
0.11.3-1.1
gitea-tea
openSUSE:Leap 16.0
From an advisory covering 2 CVEs
 before 0.11.1-bp160.1.1
0.11.1-bp160.1.1
git-bug
openSUSE:Leap 16.0
From an advisory covering 7 CVEs
 before 0.10.1-bp160.1.1
0.10.1-bp160.1.1
hauler
openSUSE:Leap 16.0
From an advisory covering 8 CVEs
 before 1.3.1-bp160.1.1
1.3.1-bp160.1.1
apptainer
openSUSE:Tumbleweed
From an advisory covering 2 CVEs
 before 1.4.5-2.1
1.4.5-2.1
kubo
openSUSE:Tumbleweed
From an advisory covering 3 CVEs
 before 0.40.1-1.1
0.40.1-1.1
yq
openSUSE:Tumbleweed
From an advisory covering 4 CVEs
 before 4.53.2-1.1
4.53.2-1.1
velociraptor
openSUSE:Tumbleweed
From an advisory covering 49 CVEs
 before 0.7.0.4.git185.a5708584-2.1
0.7.0.4.git185.a5708584-2.1
lux
openSUSE:Tumbleweed
From an advisory covering 5 CVEs
 before 0.24.1-1.1
0.24.1-1.1
containerized-data-importer1.65
openSUSE:Tumbleweed
From an advisory covering 13 CVEs
 before 1.65.0-2.1
1.65.0-2.1
containerized-data-importer1.66
openSUSE:Tumbleweed
From an advisory covering 12 CVEs
 before 1.66.0-1.1
1.66.0-1.1
kubevirt1.9
openSUSE:Tumbleweed
From an advisory covering 10 CVEs
 before 1.9.0-1.1
1.9.0-1.1
pocketbase
openSUSE:Tumbleweed
From an advisory covering 3 CVEs
 before 0.40.5-1.1
0.40.5-1.1
kubectl-retina
openSUSE:Tumbleweed
From an advisory covering 11 CVEs
 before 1.3.1-1.1
1.3.1-1.1
kumactl
openSUSE:Tumbleweed
From an advisory covering 14 CVEs
 before 3.0.0-1.1
3.0.0-1.1
timoni
openSUSE:Tumbleweed
From an advisory covering 14 CVEs
 before 0.36.0-1.1
0.36.0-1.1
alloy
openSUSE:Leap 16.0
From an advisory covering 3 CVEs
 before 1.12.1-160000.1.1
1.12.1-160000.1.1
go-sendxmpp
openSUSE:Leap 16.0
From an advisory covering 3 CVEs
 before 0.15.1-bp160.1.1
0.15.1-bp160.1.1
sbctl
openSUSE:Leap 16.0
From an advisory covering 3 CVEs
 before 0.18-bp160.1.1
0.18-bp160.1.1
elemental-register
openSUSE:Leap 16.0
From an advisory covering 6 CVEs
 before 1.8.1-160000.1.1
1.8.1-160000.1.1
elemental-toolkit
openSUSE:Leap 16.0
From an advisory covering 6 CVEs
 before 2.3.2-160000.1.1
2.3.2-160000.1.1
kepler
openSUSE:Leap 16.0
From an advisory covering 2 CVEs
 before 0.11.3-160000.1.1
0.11.3-160000.1.1
gitea-tea
openSUSE:Leap 16.0
From an advisory covering 2 CVEs
 before 0.12.0-bp160.1.1
0.12.0-bp160.1.1
helm
openSUSE:Leap 16.0
From an advisory covering 2 CVEs
 before 3.19.1-160000.1.1
3.19.1-160000.1.1
google-osconfig-agent
openSUSE:Leap 16.0
From an advisory covering 22 CVEs
 before 20260615.01-160000.1.2
20260615.01-160000.1.2
lux
openSUSE:Leap 16.0
From an advisory covering 9 CVEs
 before 0.24.1-bp160.1.1
0.24.1-bp160.1.1
govulncheck-vulndb
openSUSE:Leap 16.0
From an advisory covering 1734 CVEs
 before 0.0.20260723T184607-160000.1.1
0.0.20260723T184607-160000.1.1
gitea-tea
openSUSE:Leap 16.0
From an advisory covering 7 CVEs
 before 0.15.1-bp160.1.1
0.15.1-bp160.1.1
glab
openSUSE:Leap 16.0
From an advisory covering 24 CVEs
 before 1.114.0-bp160.1.1
1.114.0-bp160.1.1
containerized-data-importer1.65
openSUSE:Leap 16.0
From an advisory covering 39 CVEs
 before 1.65.0-160000.3.1
1.65.0-160000.3.1

History

History
RecordedChangedSources
affected
affected, factsOSV
affected
first indexedCVE List, EUVD, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2025-58190 is a medium vulnerability (CVSS 5.3) in Go Html, published October 8, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.54%, the 45th percentile. Fixed in cert-manager 1.11.2-27.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 24 versions and 2,212 references. The JSON record has them. Also not on the record: 22 aliases. ID and package lookups still check them. Left out on purpose, here and in the API, to keep responses small: 72 source records.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open