{"action":"Upgrade github.com/3scale-sre/marin3r to 0.13.4 or later.","affected":[{"fixed":"0.13.4","introduced":"0"}],"component":"github.com/3scale-sre/marin3r","cve_ids":["CVE-2025-64171"],"ecosystem":"Go","epss":0.00216,"exploited":false,"fixed_versions":["0.13.4"],"ghsa_id":"GHSA-gf93-xccm-5g6j","id":"tcs_01M5KFAVZMDZNG5VKCG7E9M87P","modified_at":"2025-11-17T21:36:00Z","published_at":"2025-11-04T15:43:52Z","references":["https://osv.dev/vulnerability/GHSA-gf93-xccm-5g6j","https://github.com/3scale-sre/marin3r/security/advisories/GHSA-gf93-xccm-5g6j","https://nvd.nist.gov/vuln/detail/CVE-2025-64171","https://github.com/3scale-sre/marin3r/pull/294","https://github.com/3scale-sre/marin3r/commit/859b14115fde1d67620e645cd1b62e90e30d9981","https://github.com/3scale-sre/marin3r/commit/c60246a43ae8c0c38dd7267f298d68a121a159fa","https://github.com/3scale-sre/marin3r"],"severity":{"label":"high","score":8.7},"sources":[{"source":"osv","source_id":"GHSA-gf93-xccm-5g6j","url":"https://osv.dev/vulnerability/GHSA-gf93-xccm-5g6j"},{"source":"nvd","source_id":"CVE-2025-64171","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-64171"}],"summary":"MARIN3R: Cross-Namespace Vulnerability in the Operator"}