Debian Linux - golang-github-go-viper-mapstructure - None

Red Hat Enterprise Linux - github.com/go-viper/mapstructure/v2: Go-viper's mapstructure May Leak Sensitive Information in Logs in github.com/go-viper/mapstructure

Ubuntu Linux - [May Leak Sensitive Information in Logs]

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-a887e86abc advisory.

    Update to 5.8.0

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / openSUSE 15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:4482-1 advisory.

    grafana was updated from version 11.5.5 to 11.5.10:

    - Security issues fixed:

      * CVE-2025-64751: Dropped experimental implementation of authorization Zanzana server/client (version     11.5.10)         (bsc#1254113)
      * CVE-2025-47911: Fixed parsing HTML documents (version 11.5.10) (bsc#1251454)
      * CVE-2025-58190: Fixed excessive memory consumption (version 11.5.10) (bsc#1251657)
      * CVE-2025-11065: Fixed sensitive information leak in logs (version 11.5.9) (bsc#1250616)
      * CVE-2025-6023: Fixed cross-site-scripting via scripted dashboards (version 11.5.7) (bsc#1246735)
      * CVE-2025-6197: Fixed open redirect in organization switching (version 11.5.7) (bsc#1246736)
      * CVE-2025-3415: Fixed exposure of DingDing alerting integration URL to Viewer level users (version     11.5.6)                        (bsc#1245302)


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:4479-1 advisory.

    release-notes-susemanager:

    - Update to SUSE Manager 4.3.16.2
      * SUSE Linux Enterprise Server 15 SP6 LTSS channels enabled
      * CVEs Fixed:
        CVE-2025-11065, CVE-2025-64751, CCVE-2025-47911, CVE-2025-58190         CVE-2025-62349, CVE-2025-62348
      * Bugs mentioned:
        bsc#1237060, bsc#1241455, bsc#1250911, bsc#1251864, bsc#1253024

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:4458-1 advisory.

    dracut-saltboot:

    - Update to version 1.0.0
      * Reboot on salt key timeout (bsc#1237495)
      * Fixed parsing files with space in the name (bsc#1252100)

    grafana was updated from version 11.5.5 to 11.5.10:

    - Security issues fixed:

      * CVE-2025-47911: Fix parsing HTML documents (bsc#1251454)
      * CVE-2025-58190: Fix excessive memory consumption (bsc#1251657)
      * CVE-2025-64751: Drop experimental implementation of authorization Zanzana server/client                         (bsc#1254113)
      * CVE-2025-11065: Fixed sensitive information leak in logs (version 11.5.9) (bsc#1250616)
      * CVE-2025-6023: Fixed cross-site-scripting via scripted dashboards (version 11.5.7) (bsc#1246735)
      * CVE-2025-6197: Fixed open redirect in organization switching (version 11.5.7) (bsc#1246736)
      * CVE-2025-3415: Fixed exposure of DingDing alerting integration URL to Viewer level users (version     11.5.6)                        (bsc#1245302)


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2025-20073-1 advisory.

    - CVE-2025-58058: Removed dependency on vulnerable github.com/ulikunitz/xz (bsc#1248960).
    - CVE-2025-11065: Fixed sensitive information leak in logs (bsc#1250621).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-547f14aef4 advisory.

    - Update to release v1.32.10
    - Resolves: rhbz#2414539
    - Resolves: rhbz#2398587, rhbz#2398848, rhbz#2399249, rhbz#2399522
    - Resolves: rhbz#2399703, rhbz#2399721, rhbz#2407788, rhbz#2408058
    - Resolves: rhbz#2408315, rhbz#2408609, rhbz#2408672, rhbz#2408730
    - Resolves: rhbz#2409237, rhbz#2409527, rhbz#2409788, rhbz#2410202
    - Resolves: rhbz#2410477, rhbz#2410738, rhbz#2411117, rhbz#2411376
    - Resolves: rhbz#2411634, rhbz#2412569, rhbz#2412588, rhbz#2412803
    - Upstream fixes

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-00368e9022 advisory.

    - Update to release v1.32.10
    - Resolves: rhbz#2414539
    - Resolves: rhbz#2398587, rhbz#2398848, rhbz#2399249, rhbz#2399522
    - Resolves: rhbz#2399703, rhbz#2399721, rhbz#2407788, rhbz#2408058
    - Resolves: rhbz#2408315, rhbz#2408609, rhbz#2408672, rhbz#2408730
    - Resolves: rhbz#2409237, rhbz#2409527, rhbz#2409788, rhbz#2410202
    - Resolves: rhbz#2410477, rhbz#2410738, rhbz#2411117, rhbz#2411376
    - Resolves: rhbz#2411634, rhbz#2412569, rhbz#2412588, rhbz#2412803
    - Upstream fixes

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-d9389fc692 advisory.

    - Update to release v1.31.14
    - Resolves: rhbz#2398586, rhbz#2398847, rhbz#2399248, rhbz#2399521
    - Resolves: rhbz#2399702, rhbz#2399720, rhbz#2407787, rhbz#2408057
    - Resolves: rhbz#2408314, rhbz#2408608, rhbz#2408671, rhbz#2408729
    - Resolves: rhbz#2409236, rhbz#2409526, rhbz#2409787, rhbz#2410201
    - Resolves: rhbz#2410476, rhbz#2410737, rhbz#2411116, rhbz#2411375
    - Resolves: rhbz#2411633, rhbz#2412568, rhbz#2412587, rhbz#2412802
    - Upstream fixes.
    - Likely last release of Kubernetes 1.31

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-5a4555eabc advisory.

    - Update to release v1.31.14
    - Resolves: rhbz#2398586, rhbz#2398847, rhbz#2399248, rhbz#2399521
    - Resolves: rhbz#2399702, rhbz#2399720, rhbz#2407787, rhbz#2408057
    - Resolves: rhbz#2408314, rhbz#2408608, rhbz#2408671, rhbz#2408729
    - Resolves: rhbz#2409236, rhbz#2409526, rhbz#2409787, rhbz#2410201
    - Resolves: rhbz#2410476, rhbz#2410737, rhbz#2411116, rhbz#2411375
    - Resolves: rhbz#2411633, rhbz#2412568, rhbz#2412587, rhbz#2412802
    - Upstream fixes.
    - Likely last release of Kubernetes 1.31

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-4a1370ea1b advisory.

    - Update to release v1.31.14
    - Resolves: rhbz#2398586, rhbz#2398847, rhbz#2399248, rhbz#2399521
    - Resolves: rhbz#2399702, rhbz#2399720, rhbz#2407787, rhbz#2408057
    - Resolves: rhbz#2408314, rhbz#2408608, rhbz#2408671, rhbz#2408729
    - Resolves: rhbz#2409236, rhbz#2409526, rhbz#2409787, rhbz#2410201
    - Resolves: rhbz#2410476, rhbz#2410737, rhbz#2411116, rhbz#2411375
    - Resolves: rhbz#2411633, rhbz#2412568, rhbz#2412587, rhbz#2412802
    - Upstream fixes.
    - Likely last release of Kubernetes 1.31

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-0131063534 advisory.

    - Update to release v1.32.10
    - Resolves: rhbz#2414539
    - Resolves: rhbz#2398587, rhbz#2398848, rhbz#2399249, rhbz#2399522
    - Resolves: rhbz#2399703, rhbz#2399721, rhbz#2407788, rhbz#2408058
    - Resolves: rhbz#2408315, rhbz#2408609, rhbz#2408672, rhbz#2408730
    - Resolves: rhbz#2409237, rhbz#2409527, rhbz#2409788, rhbz#2410202
    - Resolves: rhbz#2410477, rhbz#2410738, rhbz#2411117, rhbz#2411376
    - Resolves: rhbz#2411634, rhbz#2412569, rhbz#2412588, rhbz#2412803
    - Upstream fixes

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:4121-1 advisory.

    - update to 1.11.3:
    - CVE-2025-58058: Fixed memory leaks in xz. (bsc#1248960)
    - CVE-2025-11065: Fixed sensitive Information leak in logs. (bsc#1250621)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-8d7df81239 advisory.

    Automatic update for kubernetes1.32-1.32.10-2.fc44.

    ##### **Changelog**

    ```
    * Wed Nov 12 2025 Bradley G Smith <bradley.g.smith@gmail.com> - 1.32.10-1
    - Update to release v1.32.10
    - Resolves: rhbz#2414539
    - Resolves: rhbz#2398587, rhbz#2398848, rhbz#2399249, rhbz#2399522
    - Resolves: rhbz#2399703, rhbz#2399721, rhbz#2407788, rhbz#2408058
    - Resolves: rhbz#2408315, rhbz#2408609, rhbz#2408672, rhbz#2408730
    - Resolves: rhbz#2409237, rhbz#2409527, rhbz#2409788, rhbz#2410202
    - Resolves: rhbz#2410477, rhbz#2410738, rhbz#2411117, rhbz#2411376
    - Resolves: rhbz#2411634, rhbz#2412569, rhbz#2412588, rhbz#2412803
    - Upstream fixes
    * Wed Nov 12 2025 Bradley G Smith <bradley.g.smith@gmail.com> - 1.32.9-2
    - Revise template
    - Remove transition artifacts - from non-versioned kubernetes
    - Remove unneeded network rpms
    - Remove duplicate requires

    ```

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-a9a4d57353 advisory.

    Automatic update for kubernetes1.31-1.31.14-1.fc44.

    ##### **Changelog**

    ```
    * Wed Nov 12 2025 Bradley G Smith <bradley.g.smith@gmail.com> - 1.31.14-1
    - Update to release v1.31.14
    - Resolves: rhbz#2398586, rhbz#2398847, rhbz#2399248, rhbz#2399521
    - Resolves: rhbz#2399702, rhbz#2399720, rhbz#2407787, rhbz#2408057
    - Resolves: rhbz#2408314, rhbz#2408608, rhbz#2408671, rhbz#2408729
    - Resolves: rhbz#2409236, rhbz#2409526, rhbz#2409787, rhbz#2410201
    - Resolves: rhbz#2410476, rhbz#2410737, rhbz#2411116, rhbz#2411375
    - Resolves: rhbz#2411633, rhbz#2412568, rhbz#2412587, rhbz#2412802
    - Upstream fixes.
    - Likely last release of Kubernetes 1.31

    ```

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2025-1259 advisory.

    go-viper's mapstructure May Leak Sensitive Information in Logs When Processing Malformed Data     (CVE-2025-11065)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of nerdctl installed on the remote host is prior to 2.1.5-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-3060 advisory.

    go-viper's mapstructure May Leak Sensitive Information in Logs When Processing Malformed Data     (CVE-2025-11065)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of amazon-cloudwatch-agent installed on the remote host is prior to 1.300059.1-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-3037 advisory.

    go-viper's mapstructure May Leak Sensitive Information in Logs When Processing Malformed Data     (CVE-2025-11065)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2025-1224 advisory.

    go-viper's mapstructure May Leak Sensitive Information in Logs When Processing Malformed Data     (CVE-2025-11065)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - go-viper's mapstructure May Leak Sensitive Information in Logs When Processing Malformed Data     (CVE-2025-11065) (CVE-2025-11065)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Severity
280767	Fedora 42 : kustomize (2025-a887e86abc)	Nessus	Fedora Local Security Checks	medium
279356	SUSE SLES15 / openSUSE 15 Security Update : grafana (SUSE-SU-2025:4482-1)	Nessus	SuSE Local Security Checks	medium
279354	SUSE SLES15 : Security update 4.3.16.2 for Multi-Linux Manager Server LTS (SUSE-SU-2025:4479-1)	Nessus	SuSE Local Security Checks	medium
279353	openSUSE 15 : Security update 5.0.6 for Multi-Linux Manager Client Tools (SUSE-SU-2025:4458-1)	Nessus	SuSE Local Security Checks	high
277007	openSUSE 16 Security Update : trivy (openSUSE-SU-2025-20117-1)	Nessus	SuSE Local Security Checks	medium
276604	openSUSE 16 Security Update : alloy (openSUSE-SU-2025-20073-1)	Nessus	SuSE Local Security Checks	medium
276586	Fedora 41 : kubernetes1.32 (2025-547f14aef4)	Nessus	Fedora Local Security Checks	medium
276517	Fedora 43 : kubernetes1.32 (2025-00368e9022)	Nessus	Fedora Local Security Checks	medium
276515	Fedora 41 : kubernetes1.31 (2025-d9389fc692)	Nessus	Fedora Local Security Checks	medium
276511	Fedora 43 : kubernetes1.31 (2025-5a4555eabc)	Nessus	Fedora Local Security Checks	medium
276502	Fedora 42 : kubernetes1.31 (2025-4a1370ea1b)	Nessus	Fedora Local Security Checks	medium
276500	Fedora 42 : kubernetes1.32 (2025-0131063534)	Nessus	Fedora Local Security Checks	medium
275596	SUSE SLED15 / SLES15 Security Update : alloy (SUSE-SU-2025:4121-1)	Nessus	SuSE Local Security Checks	medium
275392	Fedora 44 : kubernetes1.32 (2025-8d7df81239)	Nessus	Fedora Local Security Checks	medium
275258	Fedora 44 : kubernetes1.31 (2025-a9a4d57353)	Nessus	Fedora Local Security Checks	medium
274647	Amazon Linux 2023 : nerdctl (ALAS2023-2025-1259)	Nessus	Amazon Linux Local Security Checks	high
274640	Amazon Linux 2 : nerdctl, --advisory ALAS2-2025-3060 (ALAS-2025-3060)	Nessus	Amazon Linux Local Security Checks	high
270523	Amazon Linux 2 : amazon-cloudwatch-agent, --advisory ALAS2-2025-3037 (ALAS-2025-3037)	Nessus	Amazon Linux Local Security Checks	high
270519	Amazon Linux 2023 : amazon-cloudwatch-agent (ALAS2023-2025-1224)	Nessus	Amazon Linux Local Security Checks	high
266119	Linux Distros Unpatched Vulnerability : CVE-2025-11065	Nessus	Misc.	high

Detections

Analytics

CVE-2025-11065

medium

Tenable Plugins

medium

medium

medium

high

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

high

high

high

high

high