PT-2025-32182

🗓️ 06 Aug 2025 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbu.gs👁 19 Views

Go/filesystems has a TOCTOU race condition in filepath.Walk and filepath.WalkDir functions

Reporter	Title	Published	Views	Family All 1000
IBM Security Bulletins	Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software	4 Sep 202622:18	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities addressed with IBM Business Automation Workflow cumulative fixes June 2026	29 Jun 202610:18	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Financial Transaction Manager is impacted by multiple vulnerabilities in RedHat Proxy for Kubernetes RBAC authorization	27 Aug 202619:23	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM MQ Operator and Queue manager container images	19 Jun 202608:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Guardium Data Security Center is affected by multiple vulnerabilities	23 Jan 202620:43	–	ibm
IBM Security Bulletins	Security Bulletin: Certificate Name Constraints Algorithm Vulnerable to Non-Linear Processing DoS affects watsonx.data	8 Apr 202606:45	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to Inefficient Algorithmic Complexity in crypto/x509 [CVE-2025-58187]	14 Apr 202616:54	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container is vulnerable to denial of service and loss of confidentiality due to several findings in Golang binaries	19 Dec 202515:28	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities have been identified in Golang version shipped with IBM Guardium Cryptography Manager (GCM)	27 Aug 202613:34	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Observability with Instana (OnPrem)	22 Jul 202617:41	–	ibm

Source	Link
osv	www.osv.dev/vulnerability/OESA-2026-3879
openeuler	www.openeuler.org/zh/security/security-bulletins/detail/
security-tracker	www.security-tracker.debian.org/tracker/CVE-2024-8244
osv	www.osv.dev/vulnerability/DEBIAN-CVE-2024-8244
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-46835
pkg	www.pkg.go.dev/vuln/GO-2025-9999
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-58185
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-39321
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-47910
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-27613

25 Sep 2026 00:00Current

6Medium risk

Vulners AI Score6

CVSS 3.17.5 - 10

EPSS0.00615

SSVC

vulnerable software toctou race condition filepath.walk filepath.walkdir no fix available