Patchwire CVEs, their patch status, and feeds to follow them

CVE-2025-11065

Fixed in a distro release EPSS <1%CVSS 5.3

A flaw was found in github.com/go-viper/mapstructure/v2, in the field processing component using mapstructure.WeakDecode. This vulnerability allows information disclosure through detailed error messages that may leak sensitive input values via malformed user-supplied data processed in security-critical contexts.

Published 2026-01-26 · CVE record · OSV

Products: Red Hat OpenShift Pipelines, Red Hat Advanced Cluster Management for Kubernetes 2, Red Hat Advanced Cluster Security 4, Red Hat Certification for Red Hat Enterprise Linux 8, Red Hat Certification Program for Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 9, Red Hat OpenShift AI (RHOAI), Red Hat OpenShift Container Platform 4, Red Hat OpenShift Dev Spaces, Red Hat OpenShift distributed tracing 3, Red Hat OpenShift GitOps, Red Hat Trusted Application Pipeline, Red Hat Trusted Artifact Signer, Red Hat Zero Trust Workload Identity Manager - Tech Preview

Fixed upstream

EcosystemPackageFixed in
Gogithub.com/go-viper/mapstructureno fix
Gogithub.com/go-viper/mapstructure/v22.4.0

Distro releases

ReleasePackageFixed in
Amazon Linux 2amazon-cloudwatch-agent1.300059.1-1.amzn2
Amazon Linux 2nerdctl2.1.5-1.amzn2.0.1
Amazon Linux 2023amazon-cloudwatch-agent1.300059.1-1.amzn2023
Amazon Linux 2023nerdctl2.1.5-1.amzn2023.0.1
Chainguardauditbeat-9.19.1.2-r3
Chainguardauditbeat-9.1-oci-entrypoint9.1.2-r3
Chainguardauditbeat-fips-9.19.1.2-r3
Chainguardbank-vaults1.32.0-r1
Chainguardbank-vaults-template1.32.0-r1
Chainguardbeats-9.19.1.2-r3
Chainguardbeats-fips-9.19.1.2-r3
Chainguardboring-registry-fips0.16.4-r5
Chainguarddocker-compose-fips2.39.2-r1
Chainguardfilebeat-9.19.1.2-r3
Chainguardfilebeat-9.1-oci-entrypoint9.1.2-r3
Chainguardfilebeat-fips-9.19.1.2-r3
Chainguardgrafana-11.311.3.9-r3
Chainguardgrafana-11.511.5.8-r1
Chainguardgrafana-11.5-oci-compat11.5.8-r1
Chainguardgrafana-11.611.6.5-r1
Chainguardgrafana-11.6-oci-compat11.6.5-r1
Chainguardgrafana-fips-11.611.6.5-r1
Chainguardgrafana-fips-11.6-oci-compat11.6.5-r1
Chainguardgrafana-fips-12.112.1.1-r1
Chainguardgrafana-fips-12.1-oci-compat12.1.1-r1
Chainguardheartbeat-9.19.1.2-r3
Chainguardheartbeat-9.1-oci-entrypoint9.1.2-r3
Chainguardheartbeat-fips-9.19.1.2-r3
Chainguardheartbeat-fips-9.1-oci-entrypoint9.1.2-r3
Chainguardistio-cni-fips-1.271.27.0-r3
Chainguardistio-cni-fips-1.27-compat1.27.0-r3
Chainguardistio-fips-1.271.27.0-r3
Chainguardistio-install-cni-fips-1.271.27.0-r3
Chainguardistio-install-cni-fips-1.27-compat1.27.0-r3
Chainguardistio-pilot-agent-fips-1.271.27.0-r3
Chainguardistio-pilot-agent-fips-1.27-compat1.27.0-r3
Chainguardistio-pilot-discovery-fips-1.271.27.0-r3
Chainguardjitsucom-bulker2.11.0-r2
Chainguardk9s-fips0.50.9-r6
Chainguardkyverno-1.141.14.4-r6
Chainguardkyverno-background-controller-1.141.14.4-r6
Chainguardkyverno-cleanup-controller-1.141.14.4-r6
Chainguardkyverno-cli-1.141.14.4-r6
Chainguardkyverno-init-container-1.141.14.4-r6
Chainguardkyverno-notation-aws-fips1.1-r22
Chainguardkyverno-reports-controller-1.141.14.4-r6
Chainguardmattermost-10.120
Chainguardmattermost-10.12-compat0
Chainguardmattermost-fips-10.1210.12.0-r1
Chainguardmattermost-fips-10.12-compat10.12.0-r1
Chainguardmetricbeat-9.19.1.2-r3
Chainguardmetricbeat-9.1-oci-entrypoint9.1.2-r3
Chainguardmetricbeat-fips-9.19.1.2-r3
Chainguardneuvector-sigstore-interface-fips0_git20250825-r0
Chainguardpluto-fips5.22.5-r1
Chainguardpluto-fips-compat5.22.5-r1
Chainguardrancher-security-scan-0.40.4.5-r2
Chainguardratify-fips1.4.0-r5
Chainguardratify-fips-compat1.4.0-r5
Chainguardratify-fips-crds1.4.0-r5
Chainguardratify-fips-licensechecker1.4.0-r5
Chainguardratify-fips-licensechecker-compat1.4.0-r5
Chainguardratify-fips-sbom1.4.0-r5
Chainguardratify-fips-sbom-compat1.4.0-r5
Chainguardratify-fips-schemavalidator1.4.0-r5
Chainguardratify-fips-schemavalidator-compat1.4.0-r5
Chainguardratify-fips-vulnerabilityreport1.4.0-r5
Chainguardratify-fips-vulnerabilityreport-compat1.4.0-r5
Chainguardtfsec0
Chainguardtkn-fips0.42.0-r1
Chainguardzitadel-33.4.0-r0
Chainguardzitadel-3-compat3.4.0-r0
Chainguardzitadel-44.0.3-r0
Chainguardzitadel-4-compat4.0.3-r0
Debian 13golang-github-go-viper-mapstructureno fix
Debian 14golang-github-go-viper-mapstructure2.4.0-1
SUSE Linux Enterprise Module for Basesystem 15 SP7alloy1.11.3-150700.15.9.1
SUSE Linux Enterprise Module for Basesystem 15 SP7cosign3.0.5-150400.3.35.1
SUSE Linux Enterprise Module for Package Hub 15 SP6grafana11.5.10-150200.3.80.1
SUSE Linux Enterprise Module for Package Hub 15 SP7grafana11.5.10-150200.3.80.1
SUSE Linux Enterprise Server 16.0alloy1.11.3-160000.1.1
SUSE Linux Enterprise Server 16.0cosign3.0.5-160000.1.1
SUSE Linux Enterprise Server for SAP applications 16.0alloy1.11.3-160000.1.1
SUSE Linux Enterprise Server for SAP applications 16.0cosign3.0.5-160000.1.1
SUSE Manager Client Tools 12golang-github-prometheus-alertmanager0.28.1-1.34.1
SUSE Manager Client Tools 12grafana11.5.10-1.87.1
SUSE Manager Client Tools 12mgr-push5.0.3-1.30.3
SUSE Manager Client Tools 12rhnlib5.0.6-21.55.1
SUSE Manager Client Tools 12spacecmd5.0.14-38.162.1
SUSE Manager Client Tools 12supportutils-plugin-susemanager-client5.0.5-6.36.1
SUSE Manager Client Tools 12uyuni-tools0.1.37-1.27.1
SUSE Manager Client Tools 15dracut-saltboot1.0.0-150000.1.62.1
SUSE Manager Client Tools 15grafana11.5.10-150000.1.87.1
SUSE Manager Client Tools 15mgr-push5.0.3-150000.1.30.1
SUSE Manager Client Tools 15rhnlib5.0.6-150000.3.49.1
SUSE Manager Client Tools 15spacecmd5.0.14-150000.3.139.1
SUSE Manager Client Tools 15supportutils-plugin-susemanager-client5.0.5-150000.3.30.1
SUSE Manager Client Tools 15uyuni-tools0.1.37-150000.1.27.1
SUSE Manager Client Tools for SLE Micro 5dracut-saltboot1.0.0-150000.1.62.1
SUSE Manager Client Tools for SLE Micro 5uyuni-tools0.1.37-150000.1.27.1
SUSE Manager Proxy LTS 4.3release-notes-susemanager-proxy4.3.16.2-150400.3.104.2
SUSE Manager Server LTS 4.3release-notes-susemanager4.3.16.2-150400.3.148.1
SUSE Multi Linux Manager Tools SLE-12Multi-Linux-ManagerTools-SLE-release12-120002.1.11.1
SUSE Multi Linux Manager Tools SLE-12grafana11.5.10-120002.4.6.1
SUSE Multi Linux Manager Tools SLE-12uyuni-tools5.1.23-120002.3.6.1
SUSE Multi Linux Manager Tools SLE-15grafana11.5.10-150002.4.6.1
SUSE Multi Linux Manager Tools SLE-15uyuni-tools5.1.23-150002.3.6.1
SUSE Multi Linux Manager Tools SLE-Micro-5uyuni-tools5.1.23-150002.3.6.1
Ubuntu 25.10golang-github-go-viper-mapstructureno fix
Ubuntu 26.04 LTSgolang-github-go-viper-mapstructureno fix
Ubuntu 26.10golang-github-go-viper-mapstructureno fix
Wolfibank-vaults1.32.0-r1
Wolfibank-vaults-template1.32.0-r1
Wolfijitsucom-bulker2.11.0-r2
Wolfitfsec0
openSUSE Leap 15.6cosign3.0.5-150400.3.35.1
openSUSE Leap 15.6dracut-saltboot1.0.0-150000.1.62.1
openSUSE Leap 15.6grafana11.5.10-150200.3.80.1
openSUSE Leap 15.6spacecmd5.0.14-150000.3.139.1
openSUSE Leap 15.6supportutils-plugin-susemanager-client5.0.5-150000.3.30.1
openSUSE Leap 16.0alloy1.11.3-160000.1.1
openSUSE Leap 16.0cosign3.0.5-160000.1.1
openSUSE Tumbleweedalloy1.11.2-2.1
openSUSE Tumbleweedcosign3.0.4-2.1
openSUSE Tumbleweedgrafana11.6.6-1.1
openSUSE Tumbleweedtrivy0.67.2-1.1