Go/github.com/mindersec/minder CVE-2025-65109: high 8.5, EPSS 0.30%
Minder does not sandbox http.send in Rego programs in github.com/mindersec/minder
Action: Upgrade github.com/mindersec/minder to 0.0.84 or later.
go get github.com/mindersec/minder@v0.0.84Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.0.72 | 0.0.84 | - |
Fixed versions
| 0.0.84 |
Sources
- osv: GO-2025-4147
- nvd: CVE-2025-65109
- https://github.com/mindersec/minder/security/advisories/GHSA-6xvf-4vh9-mw47
- https://github.com/mindersec/minder/commit/f770400923984649a287d7215410ef108e845af8
CVE-2025-65109 · published · modified · JSON