GitHub Advisoryadvisory · Go

GHSA-vqvv-2wj5-q34w Authorino Uncontrolled Resource Consumption vulnerability

MEDIUM Published 2025-06-09 Modified 2025-06-10 Official page ↗

Aliases: CVE-2025-25208
Ecosystem: Go
Packages: github.com/kuadrant/authorino
Severity: Moderate
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H
Weaknesses: CWE-400
Reviewed: 2025-06-09

Affected packages

• Go github.com/kuadrant/authorino: <= 0.20.0 (no fix yet)

Description

A Developer persona can bring down the Authorino service, preventing the evaluation of all AuthPolicies on the cluster

Related

Alias · CVE (1)

CVE-2025-25208 A Developer persona can bring down the Authorino service, preventing the evaluation of all AuthPolicies on the cluster vulnerability

Weakness · CWE (1)

CWE-400 Uncontrolled Resource Consumption weakness

References