Nixpkgs Security Tracker

Untriaged

Permalink CVE-2025-11065

created 2 weeks, 2 days ago

Github.com/go-viper/mapstructure/v2: go-viper's mapstructure may leak sensitive information in logs in github.com/go-viper/mapstructure

A flaw was found in github.com/go-viper/mapstructure/v2, in the field processing component using mapstructure.WeakDecode. This vulnerability allows information disclosure through detailed error messages that may leak sensitive input values via malformed user-supplied data processed in security-critical contexts.

Affected products

podman

toolbox

openshift

microshift

gvisor-tap-vsock

rhtas/cosign-rhel9

rhtas/fulcio-rhel9

devspaces/udi-rhel9

rhtas/gitsign-rhel9

rhtas/rekor-cli-rhel9

devspaces/traefik-rhel9

opentelemetry-collector

devspaces/udi-base-rhel9

rhacm2/acm-grafana-rhel9

rhoai/odh-rhel9-operator

rhtas/rekor-server-rhel9

openshift-pipelines-client

openshift4/ose-helm-operator

redhat-certification-preflight

rhoai/odh-model-registry-rhel9

openshift-gitops-1/argocd-rhel8

openshift-gitops-1/argocd-rhel9

rhtas/timestamp-authority-rhel9

rhacm2/submariner-rhel9-operator

rhtas/rekor-backfill-redis-rhel9

openshift4/ose-helm-rhel9-operator

github.com/go-viper/mapstructure/v2

<2.4.0

rhosdt/opentelemetry-collector-rhel8

rhtap-task-runner/rhtap-task-runner-rhel9

advanced-cluster-security/rhacs-main-rhel8

advanced-cluster-security/rhacs-roxctl-rhel8

advanced-cluster-security/rhacs-rhel8-operator

advanced-cluster-security/rhacs-central-db-rhel8

advanced-cluster-security/rhacs-scanner-v4-rhel8

advanced-cluster-security/rhacs-scanner-v4-db-rhel8

zero-trust-workload-identity-manager/spiffe-spire-agent-rhel9

zero-trust-workload-identity-manager/spiffe-spire-server-rhel9

zero-trust-workload-identity-manager/spiffe-spire-oidc-discovery-provider-rhel9

zero-trust-workload-identity-manager/zero-trust-workload-identity-manager-rhel9

Matching in nixpkgs

pkgs.podman

Program for managing pods, containers and container images

nixos-unstable 5.7.0
- nixpkgs-unstable 5.7.0
- nixos-unstable-small 5.7.0
nixos-25.05 5.4.1
- nixos-25.05-small 5.4.1
- nixpkgs-25.05-darwin 5.4.1

pkgs.toolbox

Tool for containerized command line environments on Linux

nixos-unstable 0.0.99.3
- nixpkgs-unstable 0.0.99.3
- nixos-unstable-small 0.0.99.3
nixos-25.05 0.0.99.3
- nixos-25.05-small 0.0.99.3
- nixpkgs-25.05-darwin 0.0.99.3

pkgs.bctoolbox

Utilities library for Linphone

nixos-25.05 5.2.109
- nixos-25.05-small 5.2.109
- nixpkgs-25.05-darwin 5.2.109

pkgs.lttoolbox

Finite state compiler, processor and helper tools used by apertium

nixos-unstable 3.7.6
- nixpkgs-unstable 3.7.6
- nixos-unstable-small 3.7.6
nixos-25.05 3.7.6
- nixos-25.05-small 3.7.6
- nixpkgs-25.05-darwin 3.7.6

pkgs.openshift

Build, deploy, and manage your applications with Docker and Kubernetes

nixos-unstable 4.16.0
- nixpkgs-unstable 4.16.0
- nixos-unstable-small 4.16.0
nixos-25.05 4.16.0
- nixos-25.05-small 4.16.0
- nixpkgs-25.05-darwin 4.16.0

pkgs.devtoolbox

Development tools at your fingertips

nixos-unstable 1.3.0
- nixpkgs-unstable 1.3.0
- nixos-unstable-small 1.3.0
nixos-25.05 1.2.5
- nixos-25.05-small 1.2.5
- nixpkgs-25.05-darwin 1.2.5

pkgs.podman-tui

Podman Terminal UI

nixos-unstable 1.9.0
- nixpkgs-unstable 1.9.0
- nixos-unstable-small 1.9.0
nixos-25.05 1.8.1
- nixos-25.05-small 1.8.1
- nixpkgs-25.05-darwin 1.8.1

pkgs.podman-bootc

Streamlining podman+bootc interactions

nixos-unstable 0.1.2
- nixpkgs-unstable 0.1.2
- nixos-unstable-small 0.1.2
nixos-25.05 0.1.2
- nixos-25.05-small 0.1.2
- nixpkgs-25.05-darwin 0.1.2

pkgs.podman-compose

Implementation of docker-compose with podman backend

nixos-unstable 1.5.0
- nixpkgs-unstable 1.5.0
- nixos-unstable-small 1.5.0
nixos-25.05 1.3.0
- nixos-25.05-small 1.3.0
- nixpkgs-25.05-darwin 1.3.0

pkgs.podman-desktop

A graphical tool for developing on containers and Kubernetes

nixos-unstable 1.22.1
- nixpkgs-unstable 1.22.1
- nixos-unstable-small 1.22.1
nixos-25.05 1.22.1
- nixos-25.05-small 1.22.1
- nixpkgs-25.05-darwin 1.22.1

pkgs.tlaplusToolbox

IDE for the TLA+ tools

nixos-unstable 1.7.4
- nixpkgs-unstable 1.7.4
- nixos-unstable-small 1.7.4
nixos-25.05 1.7.1
- nixos-25.05-small 1.7.1
- nixpkgs-25.05-darwin 1.7.1

pkgs.jetbrains-toolbox

Jetbrains Toolbox

nixos-unstable 3.1.0.62320
- nixpkgs-unstable 3.1.0.62320
- nixos-unstable-small 3.1.0.62320
nixos-25.05 2.6.1.40902
- nixos-25.05-small 2.6.1.40902
- nixpkgs-25.05-darwin 2.6.1.40902