Package
apm-server-fips-9.0
Component
stdlib
Latest update
Fixed version
9.0.8-r6
7.5
CVSS V3
Build, ship, and run secure software with minimal, hardened container images — rebuilt from source daily and guarded under our industry-leading remediation SLA.
Start for freeStatus
Fixed version
9.0.8-r6Status
Impact
CVE-2026-25679 requires compiling with go1.25.8 or go1.26.1. The FIPS variant uses go-fips-1.24. Attempting to build with go-fips-1.25 or go-fips-1.26 fails because cockroachdb/swiss uses internal Go runtime symbols (hashFn, getRuntimeHasher, fastrand64) that were removed in go1.25. Fix requires upstream to update cockroachdb/swiss to a go1.25+-compatible version.
Status
Impact
Govulncheck found vulnerable symbols in Go binary at usr/bin/apm-server.
Status
Impact
Govulncheck found vulnerable symbols in Go binary at usr/bin/apm-server.
Status
Impact
Govulncheck found vulnerable symbols in Go binary at usr/bin/apm-server.
Status
Impact
Govulncheck found vulnerable symbols in Go binary at usr/bin/apm-server.
Status
Impact
Govulncheck found vulnerable symbols in Go binary at usr/bin/apm-server.
Status
Impact
Govulncheck found vulnerable symbols in Go binary at usr/bin/apm-server.
Status
Impact
Govulncheck found vulnerable symbols in Go binary at usr/bin/apm-server.
Status
Impact
Govulncheck found vulnerable symbols in Go binary at usr/bin/apm-server.
Status
Impact
Govulncheck found vulnerable symbols in Go binary at usr/bin/apm-server.
Status
Impact
Govulncheck found vulnerable symbols in Go binary at usr/bin/apm-server.
Status
Impact
Govulncheck found vulnerable symbols in Go binary at usr/bin/apm-server.
Status
Impact
Govulncheck found vulnerable symbols in Go binary at usr/bin/apm-server.
Status
Impact
Govulncheck found vulnerable symbols in Go binary at usr/bin/apm-server.
Status
Impact
Govulncheck found vulnerable symbols in Go binary at usr/bin/apm-server.
Status
Impact
Govulncheck found vulnerable symbols in Go binary at usr/bin/apm-server.
Status
Impact
Govulncheck found vulnerable symbols in Go binary at usr/bin/apm-server.
Status
Impact
Govulncheck found vulnerable symbols in Go binary at usr/bin/apm-server.
Status