Go/github.com/bincyber/go-sqlcrypter: low 3.7
github.com/bincyber/go-sqlcrypter vulnerable to IV collision
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.1.0 | - | 0.2.0 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-2j6r-9vv4-6gf5
- https://github.com/bincyber/go-sqlcrypter/issues/127
- https://github.com/bincyber/go-sqlcrypter/pull/128
- https://github.com/bincyber/go-sqlcrypter/commit/96c73cd2b8fd15c9da9b3eafe62c9a040f6537e8
- https://github.com/bincyber/go-sqlcrypter
- https://pkg.go.dev/vuln/GO-2024-2451
published · modified · JSON