CVE-2025-68121 is a CVSS 10.0 vulnerability in Go's crypto/tls — TLS session resumption fails to re-verify certificate anchors after config update, allowing revoked certs to maintain sessions. Affects Go < 1.24.13 and < 1.25.7. khook v0.0.4 Dockerfile uses golang:1.24 (resolves to 1.24.6). Fix: update Dockerfile to golang:1.25.7 and bump go.mod directive to go 1.25.7.
CVE-2025-68121 is a CVSS 10.0 vulnerability in Go's crypto/tls — TLS session resumption fails to re-verify certificate anchors after config update, allowing revoked certs to maintain sessions. Affects Go < 1.24.13 and < 1.25.7. khook v0.0.4 Dockerfile uses golang:1.24 (resolves to 1.24.6). Fix: update Dockerfile to golang:1.25.7 and bump go.mod directive to go 1.25.7.