Skip to content

CVE-2025-22874 - Usage of ExtKeyUsageAny disables policy validation in crypto/x509 (datadog/serverless-init) #37967

New issue
New issue
Open
Open
CVE-2025-22874 - Usage of ExtKeyUsageAny disables policy validation in crypto/x509 (datadog/serverless-init)#37967
Labels
team/serverless
@ejasarevic

Description

@ejasarevic
ejasarevic
opened on Jun 16, 2025

Hi, we are using datadog/serverless-init:1-alpine (points to 1.7.3 currently) and got report for CVE-2025-22874 vulnerability.

Image

Are you already aware of this one?

Metadata

Metadata

Assignees

No one assigned

    Labels

    team/serverless

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions