Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

minder — Vulnerabilities & Security Advisories 9

All 9 CVE vulnerabilities found in minder, with AI-generated Chinese analysis, references, and POCs.

Vendor: stacklok

CVE IDTitleCVSSSeverityPublished
CVE-2025-65109 Minder does not sandbox http.send in Rego programs CWE-830 4.3 -2025-11-21
CVE-2024-37904 Denial of service from maliciously configured Git repository in Minder CWE-400 5.7 Medium2024-06-18
CVE-2024-35238 Denial of service of Minder Server from maliciously crafted GitHub attestations CWE-770 5.3 Medium2024-05-27
CVE-2024-35194 Stacklok Minder vulnerable to denial of service from maliciously crafted templates CWE-400 5.3 Medium2024-05-20
CVE-2024-35185 Denial of service of Minder Server with attacker-controlled REST endpoint CWE-400 5.3 Medium2024-05-16
CVE-2024-34084 Minder's Github Webhook Handler vulnerable to denial of service from un-validated requests CWE-400 7.5 High2024-05-07
CVE-2024-31455 Minder GetRepositoryByName data leak CWE-200 4.3 Medium2024-04-09
CVE-2024-27916 `GetRepositoryByName`, `DeleteRepositoryByName` and `GetArtifactByName` allow access of arbitrary repositories in Minder by any authenticated user CWE-285 7.1 High2024-03-06
CVE-2024-27093 Minder trusts client-provided mapping from repo name to upstream ID CWE-20 4.6 Medium2024-02-26

All 9 known CVE vulnerabilities affecting minder with full Chinese analysis, references, and POCs where available.