VDB
GO-2025-4020
GO-2025-4020
PUBLISHED
DoS risk due to unrestricted RAR dictionary sizes in github.com/nwaples/rardecode
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| chainguard | mattermost-fips-10.10 | 0, 0, 0 |
| chainguard | mattermost-fips-10.12 | 0, 0, 0 |
| chainguard | wolfictl | 0, 0, 0 |
| chainguard | nuclei | 0, 0, 0 |
| wolfi | grafana-alloy | *, *, * |
| wolfi | gitleaks | 0, 0, 0 |
| chainguard | k9s-fips | 0, 0, 0 |
| chainguard | grype-fips | 0, 0, 0 |
| chainguard | grafana-alloy-fips | *, *, * |
| wolfi | wolfictl | 0, 0, 0 |
| chainguard | grafana-alloy | *, *, * |
| chainguard | filebrowser | 0, 0, 0 |
| wolfi | gptscript | 0, 0, 0 |
| chainguard | gptscript | 0, 0, 0 |
| chainguard | grype | 0, 0, 0 |
| chainguard | gotenberg | 0, 0, 0 |
| chainguard | syft-fips | 0, 0, 0 |
| github.com | nwaples/rardecode/v2 | 0, 0, 0 |
| chainguard | trufflehog-fips | 0, 0, 0 |
| chainguard | zarf | 0, 0, 0 |
…and 26 more
Timeline
- Nov 5, 2025 CVE Published
- Aug 7, 2026 CVE Updated