Debian Linux - golang-github-go-viper-mapstructure - None

Red Hat Enterprise Linux - github.com/go-viper/mapstructure/v2: Go-viper's mapstructure May Leak Sensitive Information in Logs in github.com/go-viper/mapstructure

Ubuntu Linux - [May Leak Sensitive Information in Logs]

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-a9a4d57353 advisory.

    Automatic update for kubernetes1.31-1.31.14-1.fc44.

    ##### **Changelog**

    ```
    * Wed Nov 12 2025 Bradley G Smith <bradley.g.smith@gmail.com> - 1.31.14-1
    - Update to release v1.31.14
    - Resolves: rhbz#2398586, rhbz#2398847, rhbz#2399248, rhbz#2399521
    - Resolves: rhbz#2399702, rhbz#2399720, rhbz#2407787, rhbz#2408057
    - Resolves: rhbz#2408314, rhbz#2408608, rhbz#2408671, rhbz#2408729
    - Resolves: rhbz#2409236, rhbz#2409526, rhbz#2409787, rhbz#2410201
    - Resolves: rhbz#2410476, rhbz#2410737, rhbz#2411116, rhbz#2411375
    - Resolves: rhbz#2411633, rhbz#2412568, rhbz#2412587, rhbz#2412802
    - Upstream fixes.
    - Likely last release of Kubernetes 1.31

    ```

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2025-1259 advisory.

    go-viper's mapstructure May Leak Sensitive Information in Logs When Processing Malformed Data     (CVE-2025-11065)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of nerdctl installed on the remote host is prior to 2.1.5-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-3060 advisory.

    go-viper's mapstructure May Leak Sensitive Information in Logs When Processing Malformed Data     (CVE-2025-11065)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of amazon-cloudwatch-agent installed on the remote host is prior to 1.300059.1-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-3037 advisory.

    go-viper's mapstructure May Leak Sensitive Information in Logs When Processing Malformed Data     (CVE-2025-11065)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2025-1224 advisory.

    go-viper's mapstructure May Leak Sensitive Information in Logs When Processing Malformed Data     (CVE-2025-11065)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Red Hat Enterprise Linux - github.com/go-viper/mapstructure/v2: Go-viper's mapstructure May Leak Sensitive     Information in Logs in github.com/go-viper/mapstructure (CVE-2025-11065)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Severity
275258	Fedora 44 : kubernetes1.31 (2025-a9a4d57353)	Nessus	Fedora Local Security Checks	medium
274647	Amazon Linux 2023 : nerdctl (ALAS2023-2025-1259)	Nessus	Amazon Linux Local Security Checks	high
274640	Amazon Linux 2 : nerdctl, --advisory ALAS2-2025-3060 (ALAS-2025-3060)	Nessus	Amazon Linux Local Security Checks	high
270523	Amazon Linux 2 : amazon-cloudwatch-agent, --advisory ALAS2-2025-3037 (ALAS-2025-3037)	Nessus	Amazon Linux Local Security Checks	high
270519	Amazon Linux 2023 : amazon-cloudwatch-agent (ALAS2023-2025-1224)	Nessus	Amazon Linux Local Security Checks	high
266119	Linux Distros Unpatched Vulnerability : CVE-2025-11065	Nessus	Misc.	high

Detections

Analytics

CVE-2025-11065

high

Tenable Plugins

medium

high

high

high

high

high