/
DirectorySecurity AdvisoriesPricing
Sign in
Security Advisories

CVE-2025-13425

Published

Last updated

NVD

https://nvd.nist.gov/vuln/detail/CVE-2025-13425

Severity

Unknown

Description

A bug in the filesystem traversal fallback path causes fs/diriterate/diriterate.go:Next() to overindex an empty slice when ReadDir returns nil for an empty directory, resulting in a panic (index out of range) and an application crash (denial of service) in OSV-SCALIBR.

References

  • https://images.chainguard.dev/security/CGA-x935-c3g8-2vj4

Affected packages


The trusted source for open source

Talk to an expert
© 2025 Chainguard. All Rights Reserved.
PrivacyTerms

Product

Chainguard ContainersChainguard LibrariesChainguard VMsIntegrationsPricing