---
title: "Security digest: April 22, 2025"
url: https://erroneo.us/security/2025-04-22/
description: "April 22, 2025 vulnerability digest: 3 critical advisories (Go, PyPI, npm). What to patch and who can relax."
type: security-digest-day
section: "Security Digest"
date_published: 2025-04-22
date_modified: 2025-04-22
publisher: erroneo.us
author: erroneo.us Security Desk
license: All rights reserved. Quote with attribution and a link.
---

# Security digest: April 22, 2025

3 critical advisories.

## Take stock

- Go: 1 critical advisory ( github.com/wazuh/wazuh ). Check with govulncheck ./... .
- PyPI: 1 critical advisory ( vllm ). Check with pip-audit (or: pip show <package>) .
- npm: 1 critical advisory ( xrpl ). Check with npm audit (or: npm ls <package>) .
- None of it touches your stack? Then there is nothing to do today. That is a result, not a failure to read carefully.

## Known exploited (CISA KEV)

None.

## Critical advisories

- [CVE-2025-24016](https://erroneo.us/security/cve/CVE-2025-24016/index.md) Wazuh server vulnerable to remote code execution — Go github.com/wazuh/wazuh >= 4.4.0, < 4.9.1 → 4.9.1
- [GHSA-ggpf-24jw-3fcw](https://erroneo.us/security/ghsa/GHSA-ggpf-24jw-3fcw/index.md) CVE-2025-24357 Malicious model remote code execution fix bypass with PyTorch < 2.6.0 — PyPI vllm < 0.8.0 → 0.8.0
- [CVE-2025-32965](https://erroneo.us/security/cve/CVE-2025-32965/index.md) Compromised xrpl.js versions 4.2.1, 4.2.2, 4.2.3, 4.2.4, and 2.14.2 — npm xrpl >= 4.2.1, < 4.2.5 → 4.2.5; npm xrpl = 2.14.2 → 2.14.3

---
Source page: https://erroneo.us/security/2025-04-22/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt