Lifecycle Timeline
1DescriptionCVE.org
Alpine Linux: go fixed in 1.25.2-r0
AnalysisAI
The Go programming language package as distributed by Alpine Linux received a security fix in package version 1.25.2-r0. The vulnerability was reported exclusively by the Alpine Linux vendor and carries an EPSS score of 0.04% (11th percentile), indicating a very low current exploitation probability. No CVSS score, vector, CWE classification, or technical description of the underlying flaw is available in the provided intelligence data, making comprehensive impact assessment impossible without consulting the Alpine Linux security advisory directly.
Technical ContextAI
The affected component is the Go language toolchain or runtime as packaged and distributed by Alpine Linux. Alpine uses its own package versioning scheme (e.g., 1.25.2-r0 denotes the Alpine package revision, not necessarily the upstream Go release version). No CWE is assigned, so the root cause class - whether memory safety, logic flaw, cryptographic weakness, or other category - cannot be determined from available data. No CPE strings were provided to identify the exact affected upstream Go version range. The vulnerability scope (compiler, standard library, runtime, or toolchain component) is entirely uncharacterized in the provided intelligence.
Affected ProductsAI
The Alpine Linux Go package prior to version 1.25.2-r0 is confirmed affected per the Alpine Linux vendor report. The exact upstream Go version range (e.g., go1.24.x or earlier) is not specified in the available data. No CPE strings are provided to further narrow the affected product scope. Systems running Alpine Linux with an unpatched Go package version earlier than 1.25.2-r0 should be considered affected. Consult the Alpine Linux security tracker at https://security.alpinelinux.org for the authoritative advisory and specific edge/stable branch applicability.
RemediationAI
Update the Alpine Linux Go package to version 1.25.2-r0 or later using the standard Alpine package manager: run 'apk update && apk upgrade go' on affected systems. The fix version 1.25.2-r0 is confirmed per the Alpine Linux vendor report. No workarounds or compensating controls are documented in the available data, and none can be responsibly recommended without knowing the nature of the vulnerability. If immediate patching is not feasible, consider restricting access to systems relying on the Go toolchain for untrusted input processing as a general precaution, but note this is a non-specific measure. Review the Alpine Linux security advisory at https://security.alpinelinux.org for any vendor-recommended interim mitigations.
Same technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today