CVE-2025-11065
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2025
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
Github.com/go-viper/mapstructure/v2: go-viper's mapstructure may leak sensitive information in logs in github.com/go-viper/mapstructure
A flaw was found in github.com/go-viper/mapstructure/v2, in the field processing component using mapstructure.WeakDecode. This vulnerability allows information disclosure through detailed error messages that may leak sensitive input values via malformed user-supplied data processed in security-critical contexts.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
github.com/go-viper/mapstructure/v2
- Vendor
- Unknown
- Product
- Unknown
- Platforms
- Unknown
- Default status
unaffected- Package
- github.com/go-viper/mapstructure/v2
- Package collection
- https://github.com/go-viper/mapstructure/
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 0 | affected | semver | 2.4.0 | Unavailable | None listed |
OpenShift Pipelines
- Vendor
- Red Hat
- Product
- OpenShift Pipelines
- Platforms
- Unknown
- Default status
affected- Package
- openshift-pipelines-client
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Advanced Cluster Management for Kubernetes 2
- Vendor
- Red Hat
- Product
- Red Hat Advanced Cluster Management for Kubernetes 2
- Platforms
- Unknown
- Default status
affected- Package
- rhacm2/acm-grafana-rhel9
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Advanced Cluster Management for Kubernetes 2
- Vendor
- Red Hat
- Product
- Red Hat Advanced Cluster Management for Kubernetes 2
- Platforms
- Unknown
- Default status
affected- Package
- rhacm2/submariner-rhel9-operator
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Advanced Cluster Security 4
- Vendor
- Red Hat
- Product
- Red Hat Advanced Cluster Security 4
- Platforms
- Unknown
- Default status
affected- Package
- advanced-cluster-security/rhacs-central-db-rhel8
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Advanced Cluster Security 4
- Vendor
- Red Hat
- Product
- Red Hat Advanced Cluster Security 4
- Platforms
- Unknown
- Default status
affected- Package
- advanced-cluster-security/rhacs-main-rhel8
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Advanced Cluster Security 4
- Vendor
- Red Hat
- Product
- Red Hat Advanced Cluster Security 4
- Platforms
- Unknown
- Default status
affected- Package
- advanced-cluster-security/rhacs-rhel8-operator
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Advanced Cluster Security 4
- Vendor
- Red Hat
- Product
- Red Hat Advanced Cluster Security 4
- Platforms
- Unknown
- Default status
affected- Package
- advanced-cluster-security/rhacs-roxctl-rhel8
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Advanced Cluster Security 4
- Vendor
- Red Hat
- Product
- Red Hat Advanced Cluster Security 4
- Platforms
- Unknown
- Default status
affected- Package
- advanced-cluster-security/rhacs-scanner-v4-db-rhel8
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Advanced Cluster Security 4
- Vendor
- Red Hat
- Product
- Red Hat Advanced Cluster Security 4
- Platforms
- Unknown
- Default status
affected- Package
- advanced-cluster-security/rhacs-scanner-v4-rhel8
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Certification for Red Hat Enterprise Linux 8
- Vendor
- Red Hat
- Product
- Red Hat Certification for Red Hat Enterprise Linux 8
- Platforms
- Unknown
- Default status
affected- Package
- redhat-certification-preflight
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Certification Program for Red Hat Enterprise Linux 9
- Vendor
- Red Hat
- Product
- Red Hat Certification Program for Red Hat Enterprise Linux 9
- Platforms
- Unknown
- Default status
affected- Package
- redhat-certification-preflight
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Enterprise Linux 10
- Vendor
- Red Hat
- Product
- Red Hat Enterprise Linux 10
- Platforms
- Unknown
- Default status
affected- Package
- gvisor-tap-vsock
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Enterprise Linux 10
- Vendor
- Red Hat
- Product
- Red Hat Enterprise Linux 10
- Platforms
- Unknown
- Default status
affected- Package
- opentelemetry-collector
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Enterprise Linux 10
- Vendor
- Red Hat
- Product
- Red Hat Enterprise Linux 10
- Platforms
- Unknown
- Default status
affected- Package
- toolbox
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Enterprise Linux 9
- Vendor
- Red Hat
- Product
- Red Hat Enterprise Linux 9
- Platforms
- Unknown
- Default status
affected- Package
- gvisor-tap-vsock
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Enterprise Linux 9
- Vendor
- Red Hat
- Product
- Red Hat Enterprise Linux 9
- Platforms
- Unknown
- Default status
affected- Package
- opentelemetry-collector
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Enterprise Linux 9
- Vendor
- Red Hat
- Product
- Red Hat Enterprise Linux 9
- Platforms
- Unknown
- Default status
affected- Package
- toolbox
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat OpenShift AI (RHOAI)
- Vendor
- Red Hat
- Product
- Red Hat OpenShift AI (RHOAI)
- Platforms
- Unknown
- Default status
affected- Package
- rhoai/odh-model-registry-rhel9
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat OpenShift AI (RHOAI)
- Vendor
- Red Hat
- Product
- Red Hat OpenShift AI (RHOAI)
- Platforms
- Unknown
- Default status
affected- Package
- rhoai/odh-rhel9-operator
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat OpenShift Container Platform 4
- Vendor
- Red Hat
- Product
- Red Hat OpenShift Container Platform 4
- Platforms
- Unknown
- Default status
affected- Package
- microshift
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat OpenShift Container Platform 4
- Vendor
- Red Hat
- Product
- Red Hat OpenShift Container Platform 4
- Platforms
- Unknown
- Default status
affected- Package
- openshift
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat OpenShift Container Platform 4
- Vendor
- Red Hat
- Product
- Red Hat OpenShift Container Platform 4
- Platforms
- Unknown
- Default status
affected- Package
- openshift4/ose-helm-operator
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat OpenShift Container Platform 4
- Vendor
- Red Hat
- Product
- Red Hat OpenShift Container Platform 4
- Platforms
- Unknown
- Default status
affected- Package
- openshift4/ose-helm-rhel9-operator
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat OpenShift Container Platform 4
- Vendor
- Red Hat
- Product
- Red Hat OpenShift Container Platform 4
- Platforms
- Unknown
- Default status
affected- Package
- podman
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat OpenShift Dev Spaces
- Vendor
- Red Hat
- Product
- Red Hat OpenShift Dev Spaces
- Platforms
- Unknown
- Default status
affected- Package
- devspaces/traefik-rhel9
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat OpenShift Dev Spaces
- Vendor
- Red Hat
- Product
- Red Hat OpenShift Dev Spaces
- Platforms
- Unknown
- Default status
unaffected- Package
- devspaces/udi-base-rhel9
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat OpenShift Dev Spaces
- Vendor
- Red Hat
- Product
- Red Hat OpenShift Dev Spaces
- Platforms
- Unknown
- Default status
unaffected- Package
- devspaces/udi-rhel9
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat OpenShift distributed tracing 3
- Vendor
- Red Hat
- Product
- Red Hat OpenShift distributed tracing 3
- Platforms
- Unknown
- Default status
affected- Package
- rhosdt/opentelemetry-collector-rhel8
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat OpenShift GitOps
- Vendor
- Red Hat
- Product
- Red Hat OpenShift GitOps
- Platforms
- Unknown
- Default status
affected- Package
- openshift-gitops-1/argocd-rhel8
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat OpenShift GitOps
- Vendor
- Red Hat
- Product
- Red Hat OpenShift GitOps
- Platforms
- Unknown
- Default status
affected- Package
- openshift-gitops-1/argocd-rhel9
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Trusted Application Pipeline
- Vendor
- Red Hat
- Product
- Red Hat Trusted Application Pipeline
- Platforms
- Unknown
- Default status
affected- Package
- rhtap-task-runner/rhtap-task-runner-rhel9
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Trusted Artifact Signer
- Vendor
- Red Hat
- Product
- Red Hat Trusted Artifact Signer
- Platforms
- Unknown
- Default status
affected- Package
- rhtas/cosign-rhel9
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Trusted Artifact Signer
- Vendor
- Red Hat
- Product
- Red Hat Trusted Artifact Signer
- Platforms
- Unknown
- Default status
affected- Package
- rhtas/fulcio-rhel9
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Trusted Artifact Signer
- Vendor
- Red Hat
- Product
- Red Hat Trusted Artifact Signer
- Platforms
- Unknown
- Default status
affected- Package
- rhtas/gitsign-rhel9
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Trusted Artifact Signer
- Vendor
- Red Hat
- Product
- Red Hat Trusted Artifact Signer
- Platforms
- Unknown
- Default status
affected- Package
- rhtas/rekor-backfill-redis-rhel9
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Trusted Artifact Signer
- Vendor
- Red Hat
- Product
- Red Hat Trusted Artifact Signer
- Platforms
- Unknown
- Default status
affected- Package
- rhtas/rekor-cli-rhel9
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Trusted Artifact Signer
- Vendor
- Red Hat
- Product
- Red Hat Trusted Artifact Signer
- Platforms
- Unknown
- Default status
affected- Package
- rhtas/rekor-server-rhel9
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Trusted Artifact Signer
- Vendor
- Red Hat
- Product
- Red Hat Trusted Artifact Signer
- Platforms
- Unknown
- Default status
affected- Package
- rhtas/timestamp-authority-rhel9
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Zero Trust Workload Identity Manager - Tech Preview
- Vendor
- Red Hat
- Product
- Zero Trust Workload Identity Manager - Tech Preview
- Platforms
- Unknown
- Default status
affected- Package
- zero-trust-workload-identity-manager/spiffe-spire-agent-rhel9
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Zero Trust Workload Identity Manager - Tech Preview
- Vendor
- Red Hat
- Product
- Zero Trust Workload Identity Manager - Tech Preview
- Platforms
- Unknown
- Default status
affected- Package
- zero-trust-workload-identity-manager/spiffe-spire-oidc-discovery-provider-rhel9
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Zero Trust Workload Identity Manager - Tech Preview
- Vendor
- Red Hat
- Product
- Zero Trust Workload Identity Manager - Tech Preview
- Platforms
- Unknown
- Default status
affected- Package
- zero-trust-workload-identity-manager/spiffe-spire-server-rhel9
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Zero Trust Workload Identity Manager - Tech Preview
- Vendor
- Red Hat
- Product
- Zero Trust Workload Identity Manager - Tech Preview
- Platforms
- Unknown
- Default status
affected- Package
- zero-trust-workload-identity-manager/zero-trust-workload-identity-manager-rhel9
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.