id: GO-2025-3816
modules:
    - module: chainguard.dev/apko
      versions:
        - introduced: 0.27.0
        - fixed: 0.29.5
      vulnerable_at: 0.29.4
summary: |-
    apko is vulnerable to attack through incorrect permissions in /etc/ld.so.cache
    and other files in chainguard.dev/apko
cves:
    - CVE-2025-53945
ghsas:
    - GHSA-x6ph-r535-3vjw
references:
    - advisory: https://github.com/chainguard-dev/apko/security/advisories/GHSA-x6ph-r535-3vjw
    - advisory: https://nvd.nist.gov/vuln/detail/CVE-2025-53945
    - web: https://github.com/chainguard-dev/apko/commit/04f37e2d50d5a502e155788561fb7d40de705bd9
    - web: https://github.com/chainguard-dev/apko/commit/aedb0772d6bf6e74d8f17690946dbc791d0f6af3
    - web: https://github.com/chainguard-dev/apko/releases/tag/v0.29.5
source:
    id: GHSA-x6ph-r535-3vjw
    created: 2025-07-28T21:01:42.729515774Z
review_status: UNREVIEWED