VDB
GO-2025-4008
GO-2025-4008
PUBLISHED
ALPN negotiation error contains attacker controlled information in crypto/tls
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| chainguard | terraform-fips-1.12 | 0 |
| wolfi | whereabouts | 0 |
| wolfi | juicefs-1.3 | 0 |
| wolfi | gcsfuse | 0 |
| chainguard | velero | 0 |
| wolfi | custom-pod-autoscaler-operator | 0 |
| chainguard | gcp-compute-persistent-disk-csi-driver-1.13 | 0 |
| chainguard | kubernetes-csi-external-health-monitor | 0 |
| chainguard | crossplane | 0 |
| chainguard | spire-controller-manager | 0 |
| wolfi | secrets-store-csi-driver-provider-gcp | 0 |
| chainguard | kepler | 0 |
| chainguard | runc | 0 |
| chainguard | distribution-fips | 0 |
| chainguard | terraform-provider-tls | 0 |
| wolfi | nerdctl | 0 |
| chainguard | prometheus-node-exporter-1.5 | 0 |
| chainguard | prometheus-process-exporter | 0 |
| chainguard | crossplane-provider-kubernetes | 0 |
| chainguard | harbor-fips-2.11 | 0 |
…and 1034 more
Timeline
- Oct 29, 2025 CVE Published
- May 15, 2026 CVE Updated