Vulnerability Report: GO-2025-4003

Affected Modules

• Path
  Go Versions
  Custom Versions^*
• github.com/canonical/lxd
  all versions, no known fixed
  from 0.0.0-20220401034332-1e1349e3cbf3 before 0.0.0-20250827065555-0494f5d47e41, from 6.0.0 before 6.5.0, from 5.0.0 before 5.0.5, from 5.1.0 before 5.21.4

^{*Custom versions, which can't be mapped automatically to standard Go module versions, are ignored by govulncheck. (See this note on versions for more details.)}

Aliases

• CVE-2025-54286
• GHSA-p8hw-rfjg-689h

References

• https://github.com/canonical/lxd/security/advisories/GHSA-p8hw-rfjg-689h
• https://vuln.go.dev/ID/GO-2025-4003.json

Feedback