Back Linuxsecurity

Fedora: Gobuster Critical Update Released for CVE-2025

Linuxsecurity •LinuxSecurity Advisories • December 22, 2025

Directory/File, DNS and VHost busting tool written in Go. Update Information : Fixes CVE-2025-58188, unretire package and update to 3.8.2.

Directory/File, DNS and VHost busting tool written in Go.

Fixes CVE-2025-58188, unretire package and update to 3.8.2.

* Fri Dec 5 2025 Emir Akdag - 3.8.2-1 - Unretire package and update to 3.8.2 - Fix CVE-2025-58188 - Switch to modern go-vendor-tools packaging

[ 1 ] Bug #2418895 - Review Request: gobuster - Directory/File, DNS and VHost busting tool written in Go

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-36b3527937' at the command line. For more information, refer to the dnf documentation available at

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical DoS Vulnerability in Gobuster Fixed in Fedora Update A critical update for Gobuster, a directory/file, DNS, and VHost busting tool, has been released to address CVE-2025-58188. The update includes unretiring the package and upgrading it to version 3.8.2, which was announced by Emir Akdag on December 5, 2025. 2 sources 34

Extracted Entities

CVEs (1)

CVE-2025-58188

Tools (1)

Gobuster