CVE-2025-24884

Description

kube-audit-rest's example logging configuration could disclose secret values in the audit log in github.com/RichardoC/kube-audit-rest

How to fix CVE-2025-24884

To remediate CVE-2025-24884, upgrade the affected package to a fixed version below.

• Go/github.com/RichardoC/kube-audit-rest—upgrade to 0.0.0-20250205113217-9df8886b4819 or later
• Go/github.com/RichardoC/kube-audit-rest—upgrade to 0.0.0-20250129191722-db1aa5b86725 or later

Is CVE-2025-24884 being exploited?

Low — EPSS is 0.0%, meaning exploitation activity has not been observed at scale.

Affected packages (2)

• from 0, < 0.0.0-20250205113217-9df8886b4819
• from 0, < 0.0.0-20250129191722-db1aa5b86725

CVSS scores

References (5)

• ADVISORYnvd.nist.gov/vuln/detail/CVE-2025-24884
• PATCHgithub.com/RichardoC/kube-audit-rest
• WEBgithub.com/RichardoC/kube-audit-rest/commit/db1aa5b867256b0a7bf206544c6981ab068b73dc
• WEBgithub.com/RichardoC/kube-audit-rest/security/advisories/GHSA-hcr5-wv4p-h2g2