{"action":"Upgrade github.com/milvus-io/milvus to 0.10.3-0.20251107071934-6102f001a971 or later.","affected":[{"fixed":"2.4.24","introduced":"0.10.4"},{"fixed":"2.5.21","introduced":"2.5.0"},{"fixed":"2.6.5","introduced":"2.6.0"},{"fixed":"0.10.3-0.20251107071934-6102f001a971","introduced":"0"}],"component":"github.com/milvus-io/milvus","cve_ids":["CVE-2025-64513"],"ecosystem":"Go","epss":0.00869,"exploited":false,"fixed_versions":["2.4.24","2.5.21","2.6.5","0.10.3-0.20251107071934-6102f001a971"],"ghsa_id":"GHSA-mhjq-8c7m-3f7p","id":"tcs_01M5KFFYJ7ZSVR3VK5BNZ9T8G8","modified_at":"2026-02-20T09:26:04.105984Z","published_at":"2025-11-13T15:55:00Z","references":["https://osv.dev/vulnerability/GHSA-mhjq-8c7m-3f7p","https://github.com/milvus-io/milvus/security/advisories/GHSA-mhjq-8c7m-3f7p","https://nvd.nist.gov/vuln/detail/CVE-2025-64513","https://github.com/milvus-io/milvus/pull/45379","https://github.com/milvus-io/milvus/pull/45383","https://github.com/milvus-io/milvus/pull/45391","https://github.com/milvus-io/milvus/commit/6102f001a971c8c8055a4a4cae704442d5cab793","https://github.com/milvus-io/milvus"],"severity":{"label":"critical","score":9.3},"sources":[{"source":"osv","source_id":"GHSA-mhjq-8c7m-3f7p","url":"https://osv.dev/vulnerability/GHSA-mhjq-8c7m-3f7p"},{"source":"nvd","source_id":"CVE-2025-64513","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-64513"}],"summary":"Milvus Proxy has a Critical Authentication Bypass Vulnerability"}