GO-2025-4094
NoneCVSS
—
EPSS
—
Published
Nov 17, 2025
CISA due date
—
The record
kgateway is missing xDS authorization in github.com/kgateway-dev/kgateway
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Go | github.com/kgateway-dev/kgateway | 0 | No fix |
| Go | github.com/kgateway-dev/kgateway/v2 | 0 | 2.0.5 |
| Go | github.com/kgateway-dev/kgateway/v2 | 2.1.0-agw-cel-rbac | 2.1.0 |
| go | github.com/kgateway-dev/kgateway/v2 | 2.1.0-agw-cel-rbac | 2.1.0 |