Go/github.com/3scale-sre/marin3r CVE-2025-64171: high 8.7, EPSS 0.22%

MARIN3R: Cross-Namespace Vulnerability in the Operator

Action: Upgrade github.com/3scale-sre/marin3r to 0.13.4 or later.

go get github.com/3scale-sre/marin3r@v0.13.4

Affected

Fixed versions

Sources

• osv: GHSA-gf93-xccm-5g6j
• nvd: CVE-2025-64171
• https://github.com/3scale-sre/marin3r/security/advisories/GHSA-gf93-xccm-5g6j
• https://github.com/3scale-sre/marin3r/pull/294
• https://github.com/3scale-sre/marin3r/commit/859b14115fde1d67620e645cd1b62e90e30d9981
• https://github.com/3scale-sre/marin3r/commit/c60246a43ae8c0c38dd7267f298d68a121a159fa
• https://github.com/3scale-sre/marin3r

CVE-2025-64171 · published 2025-11-04T15:43:52Z · modified 2025-11-17T21:36:00Z · JSON