Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2025-0638

Routinator crashes when illegal characters are present in manifest file names

Description

The initial code parsing the manifest did not check the content of the file names yet later code assumed that it was checked and panicked when encountering illegal characters, resulting in a crash of Routinator.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

NLnet Labs Routinator

Default version status: affected

  • 0.14.1 to < *unaffected

References