Skip to content

Commit e134486

Browse files
nicholashusingopherbot
nicholashusin
authored and
gopherbot
committed
data/reports: add 5 reports
 - data/reports/GO-2025-4163.yaml - data/reports/GO-2025-4164.yaml - data/reports/GO-2025-4171.yaml - data/reports/GO-2025-4172.yaml - data/reports/GO-2025-4174.yaml Fixes #4163 Fixes #4164 Fixes #4171 Fixes #4172 Fixes #4174 Change-Id: Ifa3cd7a0da345c40062dabbe4591ef512de67f05 Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/725981 Auto-Submit: Nicholas Husin <[email protected]> LUCI-TryBot-Result: Go LUCI <[email protected]> Reviewed-by: Nicholas Husin <[email protected]> Reviewed-by: Ethan Lee <[email protected]>
1 parent e78910e commit e134486

File tree

10 files changed

+536
-0
lines changed

10 files changed

+536
-0
lines changed

‎data/osv/GO-2025-4163.json‎

Lines changed: 60 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,60 @@
1+
{
2+
"schema_version": "1.3.1",
3+
"id": "GO-2025-4163",
4+
"modified": "0001-01-01T00:00:00Z",
5+
"published": "0001-01-01T00:00:00Z",
6+
"aliases": [
7+
"CVE-2025-60638",
8+
"GHSA-f2hj-vpp9-6vm2"
9+
],
10+
"summary": "NSSF panic due to nil pointer dereference when expiry field is omitted in NSSAIAvailability POST in github.com/free5gc/nssf",
11+
"details": "NSSF panic due to nil pointer dereference when expiry field is omitted in NSSAIAvailability POST in github.com/free5gc/nssf",
12+
"affected": [
13+
{
14+
"package": {
15+
"name": "github.com/free5gc/nssf",
16+
"ecosystem": "Go"
17+
},
18+
"ranges": [
19+
{
20+
"type": "SEMVER",
21+
"events": [
22+
{
23+
"introduced": "0"
24+
},
25+
{
26+
"fixed": "1.4.0"
27+
}
28+
]
29+
}
30+
],
31+
"ecosystem_specific": {}
32+
}
33+
],
34+
"references": [
35+
{
36+
"type": "ADVISORY",
37+
"url": "https://github.com/advisories/GHSA-f2hj-vpp9-6vm2"
38+
},
39+
{
40+
"type": "ADVISORY",
41+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-60638"
42+
},
43+
{
44+
"type": "FIX",
45+
"url": "https://github.com/free5gc/nssf/commit/66fc727a894fa821fde14030346b18de69192204"
46+
},
47+
{
48+
"type": "WEB",
49+
"url": "https://github.com/free5gc/free5gc"
50+
},
51+
{
52+
"type": "WEB",
53+
"url": "https://github.com/free5gc/free5gc/issues/704"
54+
}
55+
],
56+
"database_specific": {
57+
"url": "https://pkg.go.dev/vuln/GO-2025-4163",
58+
"review_status": "UNREVIEWED"
59+
}
60+
}

‎data/osv/GO-2025-4164.json‎

Lines changed: 60 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,60 @@
1+
{
2+
"schema_version": "1.3.1",
3+
"id": "GO-2025-4164",
4+
"modified": "0001-01-01T00:00:00Z",
5+
"published": "0001-01-01T00:00:00Z",
6+
"aliases": [
7+
"CVE-2025-60632",
8+
"GHSA-vgq7-9r5r-j9v3"
9+
],
10+
"summary": "Free5GC is vulnerable to DoS through its Npcf_BDTPolicyControl POST API in github.com/free5gc/pcf",
11+
"details": "Free5GC is vulnerable to DoS through its Npcf_BDTPolicyControl POST API in github.com/free5gc/pcf",
12+
"affected": [
13+
{
14+
"package": {
15+
"name": "github.com/free5gc/pcf",
16+
"ecosystem": "Go"
17+
},
18+
"ranges": [
19+
{
20+
"type": "SEMVER",
21+
"events": [
22+
{
23+
"introduced": "0"
24+
},
25+
{
26+
"fixed": "1.4.0"
27+
}
28+
]
29+
}
30+
],
31+
"ecosystem_specific": {}
32+
}
33+
],
34+
"references": [
35+
{
36+
"type": "ADVISORY",
37+
"url": "https://github.com/advisories/GHSA-vgq7-9r5r-j9v3"
38+
},
39+
{
40+
"type": "ADVISORY",
41+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-60632"
42+
},
43+
{
44+
"type": "FIX",
45+
"url": "https://github.com/free5gc/pcf/pull/53"
46+
},
47+
{
48+
"type": "WEB",
49+
"url": "https://github.com/free5gc/free5gc"
50+
},
51+
{
52+
"type": "WEB",
53+
"url": "https://github.com/free5gc/free5gc/issues/705"
54+
}
55+
],
56+
"database_specific": {
57+
"url": "https://pkg.go.dev/vuln/GO-2025-4164",
58+
"review_status": "UNREVIEWED"
59+
}
60+
}

‎data/osv/GO-2025-4171.json‎

Lines changed: 52 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,52 @@
1+
{
2+
"schema_version": "1.3.1",
3+
"id": "GO-2025-4171",
4+
"modified": "0001-01-01T00:00:00Z",
5+
"published": "0001-01-01T00:00:00Z",
6+
"aliases": [
7+
"CVE-2025-66410",
8+
"GHSA-jrhg-82w2-vvj7"
9+
],
10+
"summary": "Gin-vue-admin has an arbitrary file deletion vulnerability in github.com/flipped-aurora/gin-vue-admin",
11+
"details": "Gin-vue-admin has an arbitrary file deletion vulnerability in github.com/flipped-aurora/gin-vue-admin",
12+
"affected": [
13+
{
14+
"package": {
15+
"name": "github.com/flipped-aurora/gin-vue-admin",
16+
"ecosystem": "Go"
17+
},
18+
"ranges": [
19+
{
20+
"type": "SEMVER",
21+
"events": [
22+
{
23+
"introduced": "0"
24+
},
25+
{
26+
"fixed": "0.9.1-0.20251201084432-ee8d8d7e04d9"
27+
}
28+
]
29+
}
30+
],
31+
"ecosystem_specific": {}
32+
}
33+
],
34+
"references": [
35+
{
36+
"type": "ADVISORY",
37+
"url": "https://github.com/flipped-aurora/gin-vue-admin/security/advisories/GHSA-jrhg-82w2-vvj7"
38+
},
39+
{
40+
"type": "ADVISORY",
41+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-66410"
42+
},
43+
{
44+
"type": "FIX",
45+
"url": "https://github.com/flipped-aurora/gin-vue-admin/commit/ee8d8d7e04d9c38a35a6969f20e75213e84f57c6"
46+
}
47+
],
48+
"database_specific": {
49+
"url": "https://pkg.go.dev/vuln/GO-2025-4171",
50+
"review_status": "UNREVIEWED"
51+
}
52+
}

‎data/osv/GO-2025-4172.json‎

Lines changed: 179 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,179 @@
1+
{
2+
"schema_version": "1.3.1",
3+
"id": "GO-2025-4172",
4+
"modified": "0001-01-01T00:00:00Z",
5+
"published": "0001-01-01T00:00:00Z",
6+
"aliases": [
7+
"CVE-2025-12756",
8+
"GHSA-p6gj-jc38-x2m7"
9+
],
10+
"summary": "Mattermost fails to validate user permissions when deleting comments in Boards in github.com/mattermost/mattermost",
11+
"details": "Mattermost fails to validate user permissions when deleting comments in Boards in github.com/mattermost/mattermost.\n\nNOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions.\n\n(If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.)\n\nThe additional affected modules and versions are: .",
12+
"affected": [
13+
{
14+
"package": {
15+
"name": "github.com/mattermost/mattermost",
16+
"ecosystem": "Go"
17+
},
18+
"ranges": [
19+
{
20+
"type": "SEMVER",
21+
"events": [
22+
{
23+
"introduced": "0"
24+
}
25+
]
26+
}
27+
],
28+
"ecosystem_specific": {
29+
"custom_ranges": [
30+
{
31+
"type": "ECOSYSTEM",
32+
"events": [
33+
{
34+
"introduced": "11.0.0"
35+
}
36+
]
37+
}
38+
]
39+
}
40+
},
41+
{
42+
"package": {
43+
"name": "github.com/mattermost/mattermost",
44+
"ecosystem": "Go"
45+
},
46+
"ranges": [
47+
{
48+
"type": "SEMVER",
49+
"events": [
50+
{
51+
"introduced": "10.5.0+incompatible"
52+
}
53+
]
54+
}
55+
],
56+
"ecosystem_specific": {}
57+
},
58+
{
59+
"package": {
60+
"name": "github.com/mattermost/mattermost",
61+
"ecosystem": "Go"
62+
},
63+
"ranges": [
64+
{
65+
"type": "SEMVER",
66+
"events": [
67+
{
68+
"introduced": "10.11.0+incompatible"
69+
}
70+
]
71+
}
72+
],
73+
"ecosystem_specific": {}
74+
},
75+
{
76+
"package": {
77+
"name": "github.com/mattermost/mattermost",
78+
"ecosystem": "Go"
79+
},
80+
"ranges": [
81+
{
82+
"type": "SEMVER",
83+
"events": [
84+
{
85+
"introduced": "10.12.0+incompatible"
86+
}
87+
]
88+
}
89+
],
90+
"ecosystem_specific": {}
91+
},
92+
{
93+
"package": {
94+
"name": "github.com/mattermost/mattermost-server",
95+
"ecosystem": "Go"
96+
},
97+
"ranges": [
98+
{
99+
"type": "SEMVER",
100+
"events": [
101+
{
102+
"introduced": "0"
103+
}
104+
]
105+
}
106+
],
107+
"ecosystem_specific": {}
108+
},
109+
{
110+
"package": {
111+
"name": "github.com/mattermost/mattermost-server/v5",
112+
"ecosystem": "Go"
113+
},
114+
"ranges": [
115+
{
116+
"type": "SEMVER",
117+
"events": [
118+
{
119+
"introduced": "0"
120+
}
121+
]
122+
}
123+
],
124+
"ecosystem_specific": {}
125+
},
126+
{
127+
"package": {
128+
"name": "github.com/mattermost/mattermost-server/v6",
129+
"ecosystem": "Go"
130+
},
131+
"ranges": [
132+
{
133+
"type": "SEMVER",
134+
"events": [
135+
{
136+
"introduced": "0"
137+
}
138+
]
139+
}
140+
],
141+
"ecosystem_specific": {}
142+
},
143+
{
144+
"package": {
145+
"name": "github.com/mattermost/mattermost/server/v8",
146+
"ecosystem": "Go"
147+
},
148+
"ranges": [
149+
{
150+
"type": "SEMVER",
151+
"events": [
152+
{
153+
"introduced": "0"
154+
}
155+
]
156+
}
157+
],
158+
"ecosystem_specific": {}
159+
}
160+
],
161+
"references": [
162+
{
163+
"type": "ADVISORY",
164+
"url": "https://github.com/advisories/GHSA-p6gj-jc38-x2m7"
165+
},
166+
{
167+
"type": "ADVISORY",
168+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-12756"
169+
},
170+
{
171+
"type": "WEB",
172+
"url": "https://mattermost.com/security-updates"
173+
}
174+
],
175+
"database_specific": {
176+
"url": "https://pkg.go.dev/vuln/GO-2025-4172",
177+
"review_status": "UNREVIEWED"
178+
}
179+
}

0 commit comments

Comments
 (0)