CVE-2025-25208
Fixed in a distro release EPSS <1%CVSS 5.7
A Developer persona can bring down the Authorino service, preventing the evaluation of all AuthPolicies on the cluster
Products: Red Hat Connectivity Link 1
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Go | github.com/kuadrant/authorino | no fix |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| openSUSE Tumbleweed | govulncheck-vulndb | 0.0.20250612T141001-1.1 |