{"action":"Upgrade github.com/3scale-sre/marin3r to 0.13.4 or later.","affected":[{"fixed":"0.13.4","introduced":"0"}],"component":"github.com/3scale-sre/marin3r","cve_ids":["CVE-2025-64171"],"ecosystem":"Go","epss":0.00216,"exploited":false,"fixed_versions":["0.13.4"],"ghsa_id":"GHSA-gf93-xccm-5g6j","id":"tcs_01M5KGBDQTEFM6R0G5JWQH5TX6","modified_at":"2026-03-03T04:57:32.237505Z","published_at":"2025-11-17T19:11:23Z","references":["https://osv.dev/vulnerability/GO-2025-4093","https://github.com/3scale-sre/marin3r/security/advisories/GHSA-gf93-xccm-5g6j","https://nvd.nist.gov/vuln/detail/CVE-2025-64171","https://github.com/3scale-sre/marin3r/commit/859b14115fde1d67620e645cd1b62e90e30d9981","https://github.com/3scale-sre/marin3r/commit/c60246a43ae8c0c38dd7267f298d68a121a159fa","https://github.com/3scale-sre/marin3r/pull/294"],"severity":{"label":"high","score":8.7},"sources":[{"source":"osv","source_id":"GO-2025-4093","url":"https://osv.dev/vulnerability/GO-2025-4093"},{"source":"nvd","source_id":"CVE-2025-64171","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-64171"}],"summary":"MARIN3R: Cross-Namespace Vulnerability in the Operator in github.com/3scale-sre/marin3r"}