It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2025-1259 advisory.

    go-viper's mapstructure May Leak Sensitive Information in Logs When Processing Malformed Data     (CVE-2025-11065)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Red Hat Enterprise Linux - github.com/go-viper/mapstructure/v2: Go-viper's mapstructure May Leak Sensitive     Information in Logs in github.com/go-viper/mapstructure (CVE-2025-11065)

Note that Nessus relies on the presence of the package as reported by the vendor.

The version of amazon-cloudwatch-agent installed on the remote host is prior to 1.300059.1-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-3037 advisory.

    go-viper's mapstructure May Leak Sensitive Information in Logs When Processing Malformed Data     (CVE-2025-11065)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of nerdctl installed on the remote host is prior to 2.1.5-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-3060 advisory.

    go-viper's mapstructure May Leak Sensitive Information in Logs When Processing Malformed Data     (CVE-2025-11065)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2025-1224 advisory.

    go-viper's mapstructure May Leak Sensitive Information in Logs When Processing Malformed Data     (CVE-2025-11065)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-a9a4d57353 advisory.

    Automatic update for kubernetes1.31-1.31.14-1.fc44.

    ##### **Changelog**

    ```
    * Wed Nov 12 2025 Bradley G Smith <bradley.g.smith@gmail.com> - 1.31.14-1
    - Update to release v1.31.14
    - Resolves: rhbz#2398586, rhbz#2398847, rhbz#2399248, rhbz#2399521
    - Resolves: rhbz#2399702, rhbz#2399720, rhbz#2407787, rhbz#2408057
    - Resolves: rhbz#2408314, rhbz#2408608, rhbz#2408671, rhbz#2408729
    - Resolves: rhbz#2409236, rhbz#2409526, rhbz#2409787, rhbz#2410201
    - Resolves: rhbz#2410476, rhbz#2410737, rhbz#2411116, rhbz#2411375
    - Resolves: rhbz#2411633, rhbz#2412568, rhbz#2412587, rhbz#2412802
    - Upstream fixes.
    - Likely last release of Kubernetes 1.31

    ```

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-8d7df81239 advisory.

    Automatic update for kubernetes1.32-1.32.10-2.fc44.

    ##### **Changelog**

    ```
    * Wed Nov 12 2025 Bradley G Smith <bradley.g.smith@gmail.com> - 1.32.10-1
    - Update to release v1.32.10
    - Resolves: rhbz#2414539
    - Resolves: rhbz#2398587, rhbz#2398848, rhbz#2399249, rhbz#2399522
    - Resolves: rhbz#2399703, rhbz#2399721, rhbz#2407788, rhbz#2408058
    - Resolves: rhbz#2408315, rhbz#2408609, rhbz#2408672, rhbz#2408730
    - Resolves: rhbz#2409237, rhbz#2409527, rhbz#2409788, rhbz#2410202
    - Resolves: rhbz#2410477, rhbz#2410738, rhbz#2411117, rhbz#2411376
    - Resolves: rhbz#2411634, rhbz#2412569, rhbz#2412588, rhbz#2412803
    - Upstream fixes
    * Wed Nov 12 2025 Bradley G Smith <bradley.g.smith@gmail.com> - 1.32.9-2
    - Revise template
    - Remove transition artifacts - from non-versioned kubernetes
    - Remove unneeded network rpms
    - Remove duplicate requires

    ```

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
274647	Amazon Linux 2023 : nerdctl (ALAS2023-2025-1259)	Nessus	Amazon Linux Local Security Checks	11/11/2025	11/11/2025	high
266119	Linux Distros Unpatched Vulnerability : CVE-2025-11065	Nessus	Misc.	9/29/2025	9/29/2025	high
270523	Amazon Linux 2 : amazon-cloudwatch-agent, --advisory ALAS2-2025-3037 (ALAS-2025-3037)	Nessus	Amazon Linux Local Security Checks	10/15/2025	10/15/2025	high
274640	Amazon Linux 2 : nerdctl, --advisory ALAS2-2025-3060 (ALAS-2025-3060)	Nessus	Amazon Linux Local Security Checks	11/11/2025	11/11/2025	high
270519	Amazon Linux 2023 : amazon-cloudwatch-agent (ALAS2023-2025-1224)	Nessus	Amazon Linux Local Security Checks	10/15/2025	10/15/2025	high
275258	Fedora 44 : kubernetes1.31 (2025-a9a4d57353)	Nessus	Fedora Local Security Checks	11/12/2025	11/12/2025	medium
275392	Fedora 44 : kubernetes1.32 (2025-8d7df81239)	Nessus	Fedora Local Security Checks	11/13/2025	11/13/2025	medium

Detections

Analytics

Plugins Search

high

high

high

high

high

medium

medium