CVE-2025-11065Patch

LOWCVSS 5.3 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

A flaw was found in github.com/go-viper/mapstructure/v2, in the field processing component using mapstructure.WeakDecode. This vulnerability allows information disclosure through detailed error messages that may leak sensitive input values via malformed user-supplied data processed in security-critical contexts.

Back to dashboard

0.5/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-209

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Threat summary

Patch or workaround signal is available
1 mentions across 1 observed day

What's happening

Patch or workaround mentioned in 1 signal
1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d

Signal classification1 categories

Patch

1100.0%

Referenced assets1 URL

By indicator

https://tinyurl.com/yc23n7z8

Full discourse1 post

Ferramentas Linux@Cezar_H_Linux207d
Patch
Just a heads-up for the #Fedora community on Bluesky: The glab (GitLab CLI) packages have been updated to 1.88.0/1.89.0 to address a security flaw (CVE-2025-11065). Read more: 👉 https://tinyurl.com/yc23n7z8 #Security https://t.co/epqwIvaXZp
Post summary
Fedora glab packages were updated (1.88.0/1.89.0) to patch CVE‑2025‑11065; no PoC, exploit, or active exploitation is referenced.
00000173
1.4K followersView on X

Explore more

Back to dashboard