CVE-2025-11065 Github.com/go-viper/mapstructure/v2: go-viper's mapstructure may leak sensitive information in logs in github.com/go-viper/mapstructure
A flaw was found in github.com/go-viper/mapstructure/v2, in the field processing component using mapstructure.WeakDecode. This vulnerability allows information disclosure through detailed error messages that may leak sensitive input values via malformed user-supplied data processed in security-critical contexts.
Problem types: cwe_id: CWE-209
description: Generation of Error Message Containing Sensitive Information
Affected products: default_status: unaffected
vendor: Red Hat
product: OpenShift Pipelines
cpes: cpe:/a:redhat:openshift_pipelines:1
default_status: affected
vendor: Red Hat
product: Red Hat Advanced Cluster Management for Kubernetes 2
cpes: cpe:/a:redhat:acm:2
default_status: affected
vendor: Red Hat
product: Red Hat Advanced Cluster Management for Kubernetes 2
cpes: cpe:/a:redhat:acm:2
default_status: affected
vendor: Red Hat
product: Red Hat Advanced Cluster Security 4
cpes: cpe:/a:redhat:advanced_cluster_security:4
default_status: affected
vendor: Red Hat
product: Red Hat Advanced Cluster Security 4
cpes: cpe:/a:redhat:advanced_cluster_security:4
default_status: affected
vendor: Red Hat
product: Red Hat Advanced Cluster Security 4
cpes: cpe:/a:redhat:advanced_cluster_security:4
default_status: affected
vendor: Red Hat
product: Red Hat Advanced Cluster Security 4
cpes: cpe:/a:redhat:advanced_cluster_security:4
default_status: affected
vendor: Red Hat
product: Red Hat Advanced Cluster Security 4
cpes: cpe:/a:redhat:advanced_cluster_security:4
default_status: affected
vendor: Red Hat
product: Red Hat Advanced Cluster Security 4
cpes: cpe:/a:redhat:advanced_cluster_security:4
default_status: affected
vendor: Red Hat
product: Red Hat Certification for Red Hat Enterprise Linux 8
cpes: cpe:/a:redhat:certifications:1::el8
default_status: affected
vendor: Red Hat
product: Red Hat Certification Program for Red Hat Enterprise Linux 9
cpes: cpe:/a:redhat:certifications:9
default_status: affected
vendor: Red Hat
product: Red Hat Enterprise Linux 10
cpes: cpe:/o:redhat:enterprise_linux:10
default_status: affected
vendor: Red Hat
product: Red Hat Enterprise Linux 10
cpes: cpe:/o:redhat:enterprise_linux:10
default_status: affected
vendor: Red Hat
product: Red Hat Enterprise Linux 10
cpes: cpe:/o:redhat:enterprise_linux:10
default_status: affected
vendor: Red Hat
product: Red Hat Enterprise Linux 9
cpes: cpe:/o:redhat:enterprise_linux:9
default_status: affected
vendor: Red Hat
product: Red Hat Enterprise Linux 9
cpes: cpe:/o:redhat:enterprise_linux:9
default_status: affected
vendor: Red Hat
product: Red Hat Enterprise Linux 9
cpes: cpe:/o:redhat:enterprise_linux:9
default_status: affected
vendor: Red Hat
product: Red Hat OpenShift AI (RHOAI)
cpes: cpe:/a:redhat:openshift_ai
default_status: affected
vendor: Red Hat
product: Red Hat OpenShift AI (RHOAI)
cpes: cpe:/a:redhat:openshift_ai
default_status: affected
vendor: Red Hat
product: Red Hat OpenShift Container Platform 4
cpes: cpe:/a:redhat:openshift:4
default_status: affected
vendor: Red Hat
product: Red Hat OpenShift Container Platform 4
cpes: cpe:/a:redhat:openshift:4
default_status: affected
vendor: Red Hat
product: Red Hat OpenShift Container Platform 4
cpes: cpe:/a:redhat:openshift:4
default_status: affected
vendor: Red Hat
product: Red Hat OpenShift Container Platform 4
cpes: cpe:/a:redhat:openshift:4
default_status: affected
vendor: Red Hat
product: Red Hat OpenShift Container Platform 4
cpes: cpe:/a:redhat:openshift:4
default_status: affected
vendor: Red Hat
product: Red Hat OpenShift Dev Spaces
cpes: cpe:/a:redhat:openshift_devspaces:3
default_status: affected
vendor: Red Hat
product: Red Hat OpenShift Dev Spaces
cpes: cpe:/a:redhat:openshift_devspaces:3
default_status: unaffected
vendor: Red Hat
product: Red Hat OpenShift Dev Spaces
cpes: cpe:/a:redhat:openshift_devspaces:3
default_status: unaffected
vendor: Red Hat
product: Red Hat OpenShift distributed tracing 3
cpes: cpe:/a:redhat:openshift_distributed_tracing:3
default_status: affected
vendor: Red Hat
product: Red Hat OpenShift GitOps
cpes: cpe:/a:redhat:openshift_gitops:1
default_status: affected
vendor: Red Hat
product: Red Hat OpenShift GitOps
cpes: cpe:/a:redhat:openshift_gitops:1
default_status: affected
vendor: Red Hat
product: Red Hat Trusted Application Pipeline
cpes: cpe:/a:redhat:trusted_application_pipeline:1
default_status: affected
vendor: Red Hat
product: Red Hat Trusted Artifact Signer
cpes: cpe:/a:redhat:trusted_artifact_signer:1
default_status: affected
vendor: Red Hat
product: Red Hat Trusted Artifact Signer
cpes: cpe:/a:redhat:trusted_artifact_signer:1
default_status: affected
vendor: Red Hat
product: Red Hat Trusted Artifact Signer
cpes: cpe:/a:redhat:trusted_artifact_signer:1
default_status: affected
vendor: Red Hat
product: Red Hat Trusted Artifact Signer
cpes: cpe:/a:redhat:trusted_artifact_signer:1
default_status: affected
vendor: Red Hat
product: Red Hat Trusted Artifact Signer
cpes: cpe:/a:redhat:trusted_artifact_signer:1
default_status: affected
vendor: Red Hat
product: Red Hat Trusted Artifact Signer
cpes: cpe:/a:redhat:trusted_artifact_signer:1
default_status: affected
vendor: Red Hat
product: Red Hat Trusted Artifact Signer
cpes: cpe:/a:redhat:trusted_artifact_signer:1
default_status: affected
vendor: Red Hat
product: Zero Trust Workload Identity Manager - Tech Preview
cpes: cpe:/a:redhat:zero_trust_workload_identity_manager:0
default_status: affected
vendor: Red Hat
product: Zero Trust Workload Identity Manager - Tech Preview
cpes: cpe:/a:redhat:zero_trust_workload_identity_manager:0
default_status: affected
vendor: Red Hat
product: Zero Trust Workload Identity Manager - Tech Preview
cpes: cpe:/a:redhat:zero_trust_workload_identity_manager:0
default_status: affected
vendor: Red Hat
product: Zero Trust Workload Identity Manager - Tech Preview
cpes: cpe:/a:redhat:zero_trust_workload_identity_manager:0
default_status: affected
CVSS v3.1: attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 5.3
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N
version: 3.1
Published: 2026-01-26T19:36:28.900Z