Approved changes feed: RSS · Atom
cpe:2.3:a:mindersec:minder:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Mindersec (5eace352-7213-534b-9791-c2141fdc49ab) |
|---|---|
| Product | Minder (35353ada-2d26-5d66-92d5-e441534fe85c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-65109 |
vulnerable | 2026-06-08 07:39:20.720875 |
Minder does not sandbox http.send in Rego programs
Minder is an open source software supply chain security platform. In Minder Helm version 0.20241106.3386+ref.2507dbf and Minder Go versions from 0.0.72 to 0.0.83, Minder users may fetch content in the context of the Minder server, which may include URLs which the user would not normally have access to. This issue has been patched in Minder Helm version 0.20250203.3849+ref.fdc94f0 and Minder Go version 0.0.84.
Published: 2025-11-21T21:56:53.667Z
Updated: 2025-11-24T17:17:41.932Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.