Go/github.com/lf-edge/eve/pkg/grub CVE-2023-43636: medium 6.7, EPSS 0.13%

EVE Doesn't Protect Rootfs

Action: Upgrade github.com/lf-edge/eve/pkg/grub to 0.0.0-20220708121648-5fef4d92e758 or later.

go get github.com/lf-edge/eve/pkg/grub@v0.0.0-20220708121648-5fef4d92e758

Affected

Fixed versions

Sources

• osv: GHSA-5h7v-g49c-h887
• https://github.com/lf-edge/eve/security/advisories/GHSA-5h7v-g49c-h887
• https://nvd.nist.gov/vuln/detail/CVE-2023-43636
• https://github.com/lf-edge/eve/commit/5fef4d92e75838cc78010edaed5247dfbdae1889
• https://github.com/lf-edge/eve/commit/aa3501d6c57206ced222c33aea15a9169d629141
• https://asrg.io/security-advisories/19274
• https://asrg.io/security-advisories/cve-2023-43636
• https://github.com/lf-edge/eve

CVE-2023-43636 · published 2026-02-04T23:14:42Z · modified 2026-02-19T20:41:07.409452Z · JSON