CVE-2025-0638

—

CVSS 3.1

7.5 high

EPSS

<1%p40

Published

Jan 22, 2025 (Jan 22, 2025)

Modified

Jun 17, 2026

Description

The initial code parsing the manifest did not check the content of the file names yet later code assumed that it was checked and panicked when encountering illegal characters, resulting in a crash of Routinator.

Weakness: CWE-1286
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.