CLEANSTART-2026-CX42077 Security fixes in go-fips-1.25 1.25.6-r1

🗓️ 01 Sep 2026 11:17:16Reported by GoogleType

osv🔗 osv.dev👁 7 Views

Security fixes in go-fips-1.25 version 1.25.6-r1 address three CVEs.

Reporter	Title	Published	Views	Family All 1000
FreeBSD	oauth2-proxy -- multiple vulnerabilities	5 Feb 202600:00	–	freebsd
FreeBSD	oauth2-proxy -- multiple vulnerabilities	16 Jan 202600:00	–	freebsd
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container is vulnerable to loss of confidentiality (CVE-2025-68121)	31 Mar 202615:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Instana Observability is affected by multiple vulnerabilities within Instana Agent container image	10 Mar 202612:40	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities addressed with IBM Business Automation Workflow cumulative fixes April 2026	27 May 202615:10	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Financial Transaction Manager is impacted by multiple vulnerabilities in RedHat Proxy for Kubernetes RBAC authorization	27 Aug 202619:23	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to Improper Certificate Validation in Golang Go (CVE-2025-61727)	14 Apr 202617:03	–	ibm
IBM Security Bulletins	Security Bulletin:Vulnerability in Crypto affects IBM Netezza Appliance	10 Aug 202608:57	–	ibm
IBM Security Bulletins	Security Bulletin: Certificate Name Constraints Bypass via Wildcard SANs affects watsonx.data	8 Apr 202610:48	–	ibm
IBM Security Bulletins	Security Bulletin: DataStage on Cloud Pak for Data is vulnerable to handshake corruption due to the crypto/tls package (CVE-2025-68121)	24 Mar 202614:10	–	ibm

Source	Link
go	www.go.dev/

18 Sep 2026 12:15Current

6.9Medium risk

Vulners AI Score6.9

CVSS 3.19.1 - 10

EPSS0.00856

SSVC

go-fips-1.25 security fixes library multiple CVEs version 1.25.6