VDB
GO-2025-3955
GO-2025-3955
PUBLISHED
CrossOriginProtection insecure bypass patterns not limited to exact matches in net/http
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| wolfi | src | 0, 0, 0 |
| wolfi | kpt | 0, 0, 0 |
| wolfi | wire-go | 0, 0, 0 |
| chainguard | pg_timetable | *, *, * |
| chainguard | aws-application-networking-k8s | 0, 0, 0 |
| chainguard | helm-mapkubeapis | *, *, * |
| chainguard | k3s-1.32 | 0, 0, 0 |
| wolfi | prometheus-3.2 | 0, 0, 0 |
| chainguard | portieris | 0, 0, 0 |
| wolfi | containerd-1 | 0, 0, 0 |
| chainguard | flux-2.5 | 0, 0, 0 |
| chainguard | kapp | 0, 0, 0 |
| chainguard | dragonfly-operator | 0, 0, 0 |
| chainguard | rancher-system-upgrade-controller | 0, 0, 0 |
| chainguard | vault-1.19 | *, *, * |
| chainguard | ko | 0, 0, 0 |
| chainguard | mockgen | 0, 0, 0 |
| chainguard | headlamp | 0, 0, 0 |
| chainguard | harbor-cli | 0, 0, 0 |
| chainguard | jitsucom-bulker | *, *, * |
…and 399 more
Timeline
- Sep 22, 2025 CVE Published
- May 15, 2026 CVE Updated