https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-25T16:30:14.745898+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-64171 CVE-2025-64171 — MARIN3R: Cross-Namespace Vulnerability in the Operator 2026-10-25T16:30:14.749695+00:00

Affected: 3scale-sre marin3r

MARIN3R is a lightweight, CRD based envoy control plane for kubernetes. In versions 0.13.3 and below, there is a cross-namespace secret access vulnerability in the project's DiscoveryServiceCertificate which allows users to bypass RBAC and access secrets in unauthorized namespaces. This issue is fixed in version 0.13.4.