VDB
DEBIAN-CVE-2025-11065
DEBIAN-CVE-2025-11065
PUBLISHED
CVSS 5.300000190734863 MEDIUM
A flaw was found in github.com/go-viper/mapstructure/v2, in the field processing component using mapstructure.WeakDecode. This vulnerability allows information disclosure through detailed error messages that may leak sensitive input values via malformed user-supplied data processed in security-critical contexts.
Risk Scores
CVSS 3.1
5.300000190734863
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Debian:13 | golang-github-go-viper-mapstructure | 0, 2.2.1-1, 2.2.1-2 |
| Debian:14 | golang-github-go-viper-mapstructure | 0, 2.2.1-1, 2.2.1-2 |
Exploit Intelligence
- ghost_report_20260112_192608.json (github-poc)
- ghost_report_20260112_175243.json (github-poc)
- ghost_report_20260112_182220.json (github-poc)
- ghost_report_20260113_010235.json (github-poc)
- ghost_report_20260112_182638.json (github-poc)
Timeline
- Jan 26, 2026 CVE Published
- Apr 28, 2026 CVE Updated