VDB
GO-2025-4009
GO-2025-4009
PUBLISHED
Quadratic complexity when parsing some invalid inputs in encoding/pem
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| chainguard | stakater-reloader-0.0.128 | 0, 0, 0 |
| chainguard | skopeo | 0, 0, 0 |
| chainguard | helm-set-status | 0, 0, 0 |
| chainguard | kube-conformance-1.32 | 0, 0, 0 |
| chainguard | cloud-provider-azure-fips-1.27 | 0, 0, 0 |
| chainguard | kubernetes-dashboard-metrics-scraper-fips | 0, 0, 0 |
| chainguard | vault-env | 0, 0, 0 |
| chainguard | gcp-compute-persistent-disk-csi-driver-1.14 | 0, 0, 0 |
| chainguard | contour-1.31 | 0, 0, 0 |
| wolfi | render-template | 0, 0, 0 |
| chainguard | falco-no-driver | 0, 0, 0 |
| chainguard | fq | 0, 0, 0 |
| wolfi | ctop | 0, 0, 0 |
| chainguard | kube-conformance-1.33 | 0, 0, 0 |
| wolfi | cloud-provider-gcp-cloud-controller-manager | 0, 0, 0 |
| chainguard | kafka_exporter-fips | 0, 0, 0 |
| wolfi | docker-cli-buildx | 0, 0, 0 |
| chainguard | kubecolor | 0, 0, 0 |
| chainguard | mockgen | 0, 0, 0 |
| chainguard | knative-eventing-1.17 | 0, 0, 0 |
…and 1034 more
Timeline
- Oct 29, 2025 CVE Published
- May 15, 2026 CVE Updated