VDB
Sign up
—

GO-2025-4147

Minder does not sandbox http.send in Rego programs in github.com/mindersec/minder

Quick fix

GO-2025-4147 — github.com/mindersec/minder: upgrade to the fixed version with the command below.

go get github.com/mindersec/minder@v0.0.84

Details

Minder does not sandbox http.send in Rego programs in github.com/mindersec/minder

Are you affected?

Enter the version of the package you're using.

Affected packages

Go/github.com/mindersec/minder
Introduced in: 0.0.72Fixed in: 0.0.84
Fixgo get github.com/mindersec/minder@v0.0.84

References