Skip to content
OpenAdvisories
High · 7.5 CVE-2025-0638 EUVD-2025-1802GHSA-597x-9gj9-7q4x

Routinator crashes when illegal characters are present in manifest file names

Published Jan 22, 2025 · Updated Feb 12, 2025 · Assigned by NLnet Labs

Description

The initial code parsing the manifest did not check the content of the file names yet later code assumed that it was checked and panicked when encountering illegal characters, resulting in a crash of Routinator.

Affected products

VendorProductAffectedFixed
NLnet Labs Routinator — —

References