Vulnerability Report: GO-2025-4004

Affected Modules

• Path
  Go Versions
  Custom Versions^*
• github.com/lxc/lxd
  all versions, no known fixed
  before 5.21.4, from 0.0.0-20200331193331-03aab09f5b5c before 0.0.0-20250827065555-0494f5d47e41
• github.com/lxc/lxd/v6
  all versions, no known fixed
  from 6.0.0 before 6.5.0

^{*Custom versions, which can't be mapped automatically to standard Go module versions, are ignored by govulncheck. (See this note on versions for more details.)}

Aliases

• CVE-2025-54287
• GHSA-w2hg-2v4p-vmh6

References

• https://github.com/canonical/lxd/security/advisories/GHSA-w2hg-2v4p-vmh6
• https://vuln.go.dev/ID/GO-2025-4004.json

Feedback