Skip to content
CVE PROGRAM SOURCE RECORD1.9 Low

CVE-2025-13425

Denial of Service in OSV-SCALIBR

Description

A bug in the filesystem traversal fallback path causes fs/diriterate/diriterate.go:Next() to overindex an empty slice when ReadDir returns nil for an empty directory, resulting in a panic (index out of range) and an application crash (denial of service) in OSV-SCALIBR.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Google OSV-SCALIBR

Default version status: unaffected

  • < 0.3.4affected

References