Lifecycle Timeline
1DescriptionCVE.org
Alpine Linux: go fixed in 1.25.2-r0
AnalysisAI
Go language runtime package in Alpine Linux was patched at package version 1.25.2-r0, addressing an unspecified vulnerability. The CVE record contains minimal disclosure - no CVSS score, no CWE classification, and no description beyond the fix notation, making precise impact characterization impossible from available data alone. EPSS probability is 0.05% (14th percentile), indicating very low observed exploitation probability at time of analysis; no active exploitation has been identified.
Technical ContextAI
This CVE tracks a fix applied to the Go programming language package as distributed by Alpine Linux, versioned under Alpine's packaging scheme as 1.25.2-r0. Alpine Linux maintains its own package builds of upstream Go, and this record originates from the Alpine vendor source. Without a CWE classification or CVSS vector, the root cause class - whether memory safety, cryptographic weakness, input validation, or another category - cannot be determined from available data. The Alpine package version 1.25.2-r0 likely corresponds to Go 1.25.2 upstream, but the exact upstream Go release and its associated changelog or security advisory have not been linked in this record.
Affected ProductsAI
The affected product is the Go programming language package distributed via Alpine Linux, fixed at Alpine package version 1.25.2-r0. No CPE string or explicit vulnerable version range was provided in the CVE record. The vendor source is Alpine Linux, and no upstream Go advisory URL was linked. Environments running Alpine Linux with Go packages older than version 1.25.2-r0 should be considered potentially affected until more specific version range data is published.
RemediationAI
Update the Alpine Linux Go package to version 1.25.2-r0 or later using the Alpine package manager: 'apk upgrade go'. This is the vendor-confirmed fix version per the Alpine security advisory. No workarounds or compensating controls were specified in the CVE record, and without knowing the vulnerability class, specific compensating controls cannot be responsibly recommended. If upgrading immediately is not feasible, restricting exposure of Go-compiled services or Alpine-based container workloads to trusted networks may reduce surface area, though this is a general precaution and not a targeted mitigation for this specific issue.
Same technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today