Aller au contenu
Se connecter
1.9 Faible

CVE-2025-13425 A bug in the filesystem traversal fallback path causes fs/diriterate/diriterate.go:Next() to overindex an empty slice…

Description

A bug in the filesystem traversal fallback path causes fs/diriterate/diriterate.go:Next() to overindex an empty slice when ReadDir returns nil for an empty directory, resulting in a panic (index out of range) and an application crash (denial of service) in OSV-SCALIBR.

Produits et versions touchés

Produit Versions touchées Corrigé en
OSV-SCALIBR 0.3 premières → < 0.3.4 0.3.4

Autres CVE de OSV-SCALIBR

Les 3 CVE de OSV-SCALIBR →
CVE-2026-102252 A path traversal vulnerability (CWE-22) in the embedded VMDK filesystem extractor in Google OSV-SCALIBR versions 0.3.6… 6.9 Moyenne CVE-2025-5981 Arbitrary file write as the OSV-SCALIBR user on the host system via a path traversal vulnerability when using… 5.7 Moyenne
Suivre cette CVE