VDB
GO-2025-4134
GO-2025-4134
PUBLISHED
Unbounded memory consumption in golang.org/x/crypto/ssh
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| chainguard | crossplane-provider-aws-sns | 0, 0, 0 |
| chainguard | node-feature-discovery-0.18 | 0, 0, 0 |
| chainguard | tekton-pipelines-0.68 | *, *, * |
| chainguard | dapr-1.15 | 0, 0, 0 |
| chainguard | mc-fips | 0, 0, 0 |
| chainguard | sigstore-scaffolding-fips | *, *, * |
| wolfi | node-feature-discovery-0.18 | 0, 0, 0 |
| chainguard | external-secrets-operator-0.19 | 0, 0 |
| wolfi | prometheus-adapter | *, *, * |
| chainguard | external-secrets-operator-fips-0.19 | 0, 0, 0 |
| chainguard | loki-3.4 | 0, 0, 0 |
| chainguard | prometheus-postgres-exporter-0.10 | *, *, * |
| chainguard | harbor-registry | 0, 0, 0 |
| wolfi | scorecard | 0, 0, 0 |
| chainguard | glab | 0, 0, 0 |
| chainguard | gitsign | 0, 0, 0 |
| wolfi | blob-csi-1.27 | 0, 0, 0 |
| chainguard | helm-operator-fips | 0, 0, 0 |
| wolfi | aws-node-termination-handler | 0, 0, 0 |
| chainguard | gcp-compute-persistent-disk-csi-driver-fips-1.13 | 0, 0, 0 |
…and 1556 more
Timeline
- Nov 19, 2025 CVE Published
- May 15, 2026 CVE Updated