Lifecycle Timeline
1DescriptionCVE.org
Alpine Linux: go fixed in 1.25.2-r0
AnalysisAI
Go language runtime/toolchain on Alpine Linux received a security fix packaged as version 1.25.2-r0 in the Alpine ecosystem. The underlying nature of the vulnerability is not described in available data - the CVE record contains only a terse patch notation referencing the Alpine package. With an EPSS score of 0.03% (8th percentile) and no CISA KEV listing, real-world exploitation risk appears low at time of analysis, though the absence of technical detail prevents confident severity assessment.
Technical ContextAI
The affected software is the Go programming language toolchain as packaged by Alpine Linux (package name 'go'). Alpine Linux uses its own versioning scheme for packages (e.g., 1.25.2-r0 represents Alpine's revision 0 of an upstream Go release), so the upstream Go version corresponding to this fix is not directly inferrable from the CVE description alone. The CWE classification is absent from this record, making root-cause analysis impossible without cross-referencing upstream Go security advisories or the Alpine Linux aports commit history. No CPE strings were provided to narrow the affected platform scope.
Affected ProductsAI
Alpine Linux systems running the 'go' package prior to version 1.25.2-r0 are affected. The fix was delivered in Alpine's go package version 1.25.2-r0. The specific Alpine Linux release branches (e.g., edge, v3.x) to which this patch applies are not specified in the available data. No CPE strings were provided. For authoritative version scope, consult the Alpine Linux security tracker at security.alpinelinux.org and the upstream Go release notes at go.dev/doc/devel/release.
RemediationAI
Update the Alpine Linux 'go' package to version 1.25.2-r0 or later using the Alpine package manager: 'apk upgrade go'. This is the vendor-released patch as reported by Alpine Linux. If immediate patching is not possible and the vulnerability class were known, targeted workarounds could be recommended - however, because the nature of the vulnerability is undisclosed in this record, no specific compensating controls can be responsibly prescribed. Organizations should consult the Alpine Linux security advisory for this CVE and the corresponding upstream Go security bulletin at go.dev/security for additional remediation guidance and workaround options. No patch version beyond 1.25.2-r0 is referenced in available data.
Same technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today