RHSA-2025:13941: go-toolset Red Hat

CVSS: 8.6v3.1HighPublished

Published 18-08-2025Last modified 17-10-2026

Open JSON

Vulnerability summary

RHSA-2025:13941 is a high (CVSS 8.6) vulnerability in go-toolset Red Hat.

Overall risk

34/100

0100

Medium · default modelHow is this calculated?

CVSS score

8.6/10

010

High · v3.1 (OSV · Red hat), selected by version preference

EPSS score

Not scored

0%100%

No EPSS score yet

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 3 · Downstream 0 · Related 3

CVE-2025-4674 CVE-2025-47906 CVE-2025-47907

Timeline

18-08-2025
PublishedVulnerability first disclosed.
17-10-2026
Last modifiedVulnerability information updated.

Description

Red Hat Security Advisory: golang security update

CVSS metrics

1 score · 1 source · 1 version

v3.18.6

EPSS trend

No EPSS score has been published for this record yet.

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Redhat8 products

go-toolset< 0:1.24.6-1.el10_0
golang< 0:1.24.6-1.el10_0
golang-bin< 0:1.24.6-1.el10_0
golang-docs< 0:1.24.6-1.el10_0
golang-misc< 0:1.24.6-1.el10_0

Show all 8

1 vendor · 8 products

References

26 links

access.redhat.com/errata/RHSA-2025:13941Advisory
access.redhat.com/security/updates/classification/ARTICLE
bugzilla.redhat.com/show_bug.cgi?id=2384329REPORT
security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_13941.jsonAdvisory
access.redhat.com/security/cve/CVE-2025-4674REPORT
www.cve.org/CVERecord?id=CVE-2025-4674Advisory
nvd.nist.gov/vuln/detail/CVE-2025-4674Advisory
go.dev/cl/686515ARTICLE
go.dev/issue/74380ARTICLE
groups.google.com/g/golang-announce/c/gTNJnDXmn34ARTICLE

Show all 26 references

pkg.go.dev/vuln/GO-2025-3828Advisory
access.redhat.com/security/cve/CVE-2025-47906REPORT
bugzilla.redhat.com/show_bug.cgi?id=2396546REPORT
www.cve.org/CVERecord?id=CVE-2025-47906Advisory
nvd.nist.gov/vuln/detail/CVE-2025-47906Advisory
go.dev/cl/691775ARTICLE
go.dev/issue/74466ARTICLE
groups.google.com/g/golang-announce/c/x5MKroML2yMARTICLE
pkg.go.dev/vuln/GO-2025-3956Advisory
access.redhat.com/security/cve/CVE-2025-47907REPORT
bugzilla.redhat.com/show_bug.cgi?id=2387083REPORT
www.cve.org/CVERecord?id=CVE-2025-47907Advisory
nvd.nist.gov/vuln/detail/CVE-2025-47907Advisory
go.dev/cl/693735ARTICLE
go.dev/issue/74831ARTICLE
pkg.go.dev/vuln/GO-2025-3849Advisory