tocsin

CVE-2025-64323

3 advisories.

Go/github.com/kgateway-dev/kgateway/v2 CVE-2025-64323: medium 5.3

kgateway is missing xDS authorization

Action: Upgrade github.com/kgateway-dev/kgateway/v2 to 2.0.5 or later.

go get github.com/kgateway-dev/kgateway/v2@v2.1.0
go get github.com/kgateway-dev/kgateway/v2@v2.0.5

Affected

introducedfixedlast affected
2.1.0-agw-cel-rbac2.1.0-
02.0.5-

Fixed versions

2.1.02.0.5

Sources

CVE-2025-64323 · published · modified · JSON

Go/github.com/kgateway-dev/kgateway CVE-2025-64323: unknown

kgateway is missing xDS authorization in github.com/kgateway-dev/kgateway

Action: No fix published. Pin and monitor.

Affected

introducedfixedlast affected
0--

Fixed versions

No fixed version in the source.

Sources

CVE-2025-64323 · published · modified · JSON

Go/github.com/kgateway-dev/kgateway/v2 CVE-2025-64323: unknown

kgateway is missing xDS authorization in github.com/kgateway-dev/kgateway

Action: Upgrade github.com/kgateway-dev/kgateway/v2 to 2.0.5 or later.

go get github.com/kgateway-dev/kgateway/v2@v2.0.5
go get github.com/kgateway-dev/kgateway/v2@v2.1.0

Affected

introducedfixedlast affected
02.0.5-
2.1.0-agw-cel-rbac2.1.0-

Fixed versions

2.0.52.1.0

Sources

CVE-2025-64323 · published · modified · JSON