CVE-2025-11065
Github.com/go-viper/mapstructure/v2: go-viper's mapstructure may leak sensitive information in logs in github.com/go-viper/mapstructure
MEDIUM 5.3EPSS 0.4%
A flaw was found in github.com/go-viper/mapstructure/v2, in the field processing component using mapstructure.WeakDecode. This vulnerability allows information disclosure through detailed error messages that may leak sensitive input values via malformed user-supplied data processed in security-critical contexts.
- Affected
- Red Hat · github.com/go-viper/mapstructure/v2 · OpenShift Pipelines · Red Hat Advanced Cluster Management for Kubernetes 2 · Red Hat Advanced Cluster Security 4 · Red Hat Certification for Red Hat Enterprise Linux 8 · Red Hat Certification Program for Red Hat Enterprise Linux 9
- CVSS v3.1 REDHAT
- 5.3 MEDIUM
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N - EPSS
- 0.41% chance of exploitation in the next 30 days, 34th percentile
- Published
- 2026-01-26
- Updated
- 2026-06-29