{"action":"Upgrade github.com/milvus-io/milvus to 0.10.3-0.20251107071934-6102f001a971 or later.","affected":[{"fixed":"0.10.3-0.20251107071934-6102f001a971","introduced":"0"},{"introduced":"0.10.4"}],"component":"github.com/milvus-io/milvus","cve_ids":["CVE-2025-64513"],"ecosystem":"Go","epss":0.00869,"exploited":false,"fixed_versions":["0.10.3-0.20251107071934-6102f001a971"],"ghsa_id":"GHSA-mhjq-8c7m-3f7p","id":"tcs_01M5KGBHZKVC94AHP1MQZK0SDZ","modified_at":"2026-02-20T09:26:04.105984Z","published_at":"2025-11-17T19:11:25Z","references":["https://osv.dev/vulnerability/GO-2025-4114","https://github.com/milvus-io/milvus/security/advisories/GHSA-mhjq-8c7m-3f7p","https://nvd.nist.gov/vuln/detail/CVE-2025-64513","https://github.com/milvus-io/milvus/commit/6102f001a971c8c8055a4a4cae704442d5cab793","https://github.com/milvus-io/milvus/pull/45379","https://github.com/milvus-io/milvus/pull/45383","https://github.com/milvus-io/milvus/pull/45391"],"severity":{"label":"critical","score":9.3},"sources":[{"source":"osv","source_id":"GO-2025-4114","url":"https://osv.dev/vulnerability/GO-2025-4114"},{"source":"nvd","source_id":"CVE-2025-64513","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-64513"}],"summary":"Milvus Proxy has a Critical Authentication Bypass Vulnerability in github.com/milvus-io/milvus"}