DirectorySecurity AdvisoriesPricing
Sign in
Security Advisories

CGA-9jx6-7m97-cff3

Package

teleport-18

Component

github.com/sigstore/timestamp-authority

Latest update

Fixed

Fixed version

18.7.6-r0

Aliases

  • CVE-2025-66564
  • GHSA-4qg8-fj49-pxjh
  • GO-2025-4192

Severity

7.5

High

CVSS V3

Eliminate CVEs with Chainguard hardened images

Build, ship, and run secure software with minimal, hardened container images — rebuilt from source daily and guarded under our industry-leading remediation SLA.

Start for free

References

  • https://nvd.nist.gov/vuln/detail/CVE-2025-66564

Updates

Status

Fixed

Fixed version

18.7.6-r0

Status

Under investigation

Status

Fixed

Fixed version

18.7.5-r0

Status

Pending upstream fix

Impact

While upstream tip of main has remediated this vulnerability[1], pulling that fix into the currently released version causes build failures. Upstream maintainers will need to release a fixed version. [1] https://github.com/gravitational/teleport/commit/e7c5db7d078a5e5dcd1e73a2fe10b4d1d7b7e718

Status

Under investigation

Status

Under investigation


The trusted source for open source

Talk to an expert
PrivacyTerms

Product

Chainguard ContainersChainguard LibrariesChainguard VMsChainguard OS PackagesChainguard ActionsChainguard Agent SkillsIntegrationsPricing
© 2026 Chainguard, Inc. All Rights Reserved.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.