VDB

GO-2025-4020

GO-2025-4020 PUBLISHED

DoS risk due to unrestricted RAR dictionary sizes in github.com/nwaples/rardecode

Affected Products

VendorProductVersions
chainguardmattermost-fips-10.100
chainguardmattermost-fips-10.120
chainguardwolfictl0
chainguardnuclei0
wolfigrafana-alloy*
wolfigitleaks0
chainguardk9s-fips0
chainguardgrype-fips0
chainguardgrafana-alloy-fips*
wolfiwolfictl0
chainguardgrafana-alloy*
chainguardfilebrowser0
wolfigptscript0
chainguardgptscript0
chainguardgrype0
chainguardgotenberg0
chainguardsyft-fips0
github.comnwaples/rardecode/v20
chainguardtrufflehog-fips0
chainguardzarf0

…and 26 more

Timeline

  • Nov 5, 2025 CVE Published
  • Aug 7, 2026 CVE Updated
Open in Interactive Console →
$ Console Community · 50/day Open console ›