GO-2025-3372: github.com/golang/glog fixed in 1.2.4

GO-2025-3372 PUBLISHED

Record from OSV · Published January 28, 2025

github.com/golang/glog is fixed in 1.2.4 (Go Modules)

Vulnerability when creating log files in github.com/golang/glog

Fixed versions

Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.

Package	Ecosystem	Fixed in
github.com/golang/glog	Go Modules	1.2.4
google-osconfig-agent	Chainguard	20250122.00-r2
kyverno-fips-1.13	Chainguard	1.13.2-r5
kubeflow	Wolfi	1.10.0-r3
kube-bench-fips	Chainguard	0.10.0-r0
step-issuer-fips	Chainguard	0.9.7-r2
step-fips	Chainguard	0.28.2-r4
portieris	Chainguard	0.13.23-r3
cluster-proportional-autoscaler-fips	Chainguard	1.9.0-r3
step-ca-fips	Chainguard	0.28.1-r4
nfs-subdir-external-provisioner	Chainguard	4.0.18-r15
pulumi-language-java	Wolfi	1.0.0-r3

69 more packages have a fixed version. See every fix in Lookup.

Vendor	Product	Versions
chainguard	google-osconfig-agent	0
chainguard	kyverno-fips-1.13	0
wolfi	kubeflow	0
chainguard	kube-bench-fips	0
chainguard	step-issuer-fips	0
chainguard	step-fips	0
chainguard	portieris	0
chainguard	cluster-proportional-autoscaler-fips	0
chainguard	step-ca-fips	0
chainguard	nfs-subdir-external-provisioner	0
wolfi	pulumi-language-java	0
chainguard	kyverno-notation-aws-fips	0
chainguard	pulumi-language-yaml	0
chainguard	caddy	0
chainguard	sigstore-scaffolding	0
chainguard	amass	0
chainguard	spark-operator-fips	0
wolfi	flux-image-reflector-controller	0
wolfi	terraform-provider-google	0
wolfi	caddy	0

…and 61 more

The same record, from the CLI:

vulnetix vdb vuln GO-2025-3372
vulnetix vdb fixes GO-2025-3372

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/GO-2025-3372/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart