VDB
GO-2025-3595
GO-2025-3595
PUBLISHED
Incorrect Neutralization of Input During Web Page Generation in x/net in golang.org/x/net
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| chainguard | node-problem-detector-0.8 | 0, 0 |
| chainguard | grpc-health-probe-fips | 0, 0 |
| chainguard | cass-operator-fips-no-pvc-delete | 0, 0 |
| chainguard | rancher-2.11 | 0, 0 |
| chainguard | gcp-compute-persistent-disk-csi-driver-fips-1.13 | 0, 0 |
| wolfi | crossplane-provider-aws-lambda | 0, 0, 0 |
| chainguard | harbor-2.9 | 0, 0 |
| chainguard | terraform-provider-azurerm-fips | 0, 0 |
| chainguard | azuredisk-csi-1.28 | 0, 0 |
| chainguard | x509-certificate-exporter | 0, 0 |
| chainguard | consul-k8s-1.5 | 0, 0 |
| chainguard | gcp-compute-persistent-disk-csi-driver-1.14 | 0, 0 |
| chainguard | git-lfs | 0, 0 |
| chainguard | gatus | 0, 0 |
| chainguard | tfsec | 0, 0 |
| chainguard | crossplane-provider-aws-rds | 0, 0 |
| chainguard | atlantis | 0, 0 |
| chainguard | gitea | 0, 0 |
| wolfi | helm-operator | 0, 0, 0 |
| chainguard | rclone-fips | 0, 0 |
…and 1132 more
Timeline
- Apr 16, 2025 CVE Published
- Feb 5, 2026 CVE Updated