Minder CVE-2025-65109: Rego http.send not sandboxed leading to SSRF

github.com 2025-11-22查看中文 →

Security AdvisoryCVE-2025-65109HighMinder

Affected:

ghcr.io/mindersec/minder/helm/minder 0.20241106.3386+ref.2507dbf0
github.com/mindersec/minder v0.0.72-v0.0.83

Fixed in:

>=0.20250203.3849+ref.fdc94f
>=v0.0.84

Referenced CVEs: CVE-2025-65109

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

Zephyr OS TLS 1.3 Socket Allows TLS 1.2 Connection Vulnerability Analysis 2026-05-11 bettercap zerogod IPP handler Remote DoS via crafted chunked request fix 2026-05-11 bettercap mysql.server Remote DoS via Unchecked Capability Flags 2026-05-11 bettercap zerogod IPP Chunked Body Unrecovered Panic DoS 2026-05-11 Zero-day IPP chunked body panic vulnerability in bettercap and mitigation patch 2026-05-11

Offline Archive

Offline screenshot & PDF are Pro-exclusive