tocsin

Go/github.com/hashicorp/vault CVE-2024-5798: low 2.6, EPSS 0.34%

HashiCorp Vault Incorrectly Validated JSON Web Tokens (JWT) Audience Claims

Action: Upgrade github.com/hashicorp/vault to 1.15.9 or later.

go get github.com/hashicorp/vault@v1.17.0
go get github.com/hashicorp/vault@v1.16.3
go get github.com/hashicorp/vault@v1.15.9

Affected

introducedfixedlast affected
1.17.0-rc11.17.0-
1.16.0-rc11.16.3-
0.11.01.15.9-

Fixed versions

1.17.01.16.31.15.9

Sources

CVE-2024-5798 · published · modified · JSON