GO-2025-4004
NoneCVSS
—
EPSS
—
Published
Nov 5, 2025
CISA due date
—
The record
Canonical LXD Arbitrary File Read via Template Injection in Snapshot Patterns in github.com/lxc/lxd
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Go | github.com/lxc/lxd | 0 | No fix |
| Go | github.com/lxc/lxd | 0.0.0-20200331193331-03aab09f5b5c | 0.0.0-20250827065555-0494f5d47e41 |
| Go | github.com/lxc/lxd | 4.0 | 5.21.4 |
| Go | github.com/lxc/lxd | 4.0.0 | 5.21.4 |
| Go | github.com/lxc/lxd | 6.0 | 6.5 |
| Go | github.com/lxc/lxd | 6.0.0 | 6.5.0 |
| Go | github.com/lxc/lxd/v6 | 0 | No fix |
| go | github.com/lxc/lxd | 4.0 | 5.21.4 |
| go | github.com/lxc/lxd | 4.0.0 | 5.21.4 |
| go | github.com/lxc/lxd | 6.0 | 6.5 |
| go | github.com/lxc/lxd | 6.0.0 | 6.5.0 |