PT-2025-47814 · Unknown+1 · Minder Helm+1

Published 2025-11-20 · Updated 2025-11-25 · CVE-2025-65109

Positive Technologies (AI Summary)

CVSS v4.0

8.5

High

Base vector

AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:L/SC:H/SI:L/SA:L

Name of the Vulnerable Software and Affected Versions Minder Helm version 0.20241106.3386+ref.2507dbf Minder Go versions 0.0.72 through 0.0.83

Description Minder is an open source software supply chain security platform. Minder users may be able to retrieve content through the Minder server that they would not normally be able to access via URLs.

Recommendations Update Minder Helm to version 0.20250203.3849+ref.fdc94f0. Update Minder Go to version 0.0.84.

Exploit

Fix

Weakness Enumeration

CWE-830

Related Identifiers

CVE-2025-65109

GHSA-6XVF-4VH9-MW47

GO-2025-4147

Affected Products

Minder Go

Minder Helm

References · 12

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/65xxx/CVE-2025-65109.json · Exploit
• https://osv.dev/vulnerability/GO-2025-4147 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-65109 · Security Note
• https://osv.dev/vulnerability/CVE-2025-65109 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-6xvf-4vh9-mw47 · Vendor Advisory
• https://github.com/mindersec/minder/security/advisories/GHSA-6xvf-4vh9-mw47 · Note
• https://github.com/mindersec/minder/commit/f770400923984649a287d7215410ef108e845af8 · Note
• https://github.com/mindersec/minder · Note
• https://t.me/CVEtracker/37986 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1992067522644914399 · Twitter Post
• https://twitter.com/transilienceai/status/1992073582885634515 · Twitter Post
• https://twitter.com/CVEnew/status/1991994074019123599 · Twitter Post