Go/github.com/gravitl/netmaker CVE-2022-0664: high 8.8, EPSS 1.75%
Use of Hard-coded Cryptographic Key in Netmaker
Action: Upgrade github.com/gravitl/netmaker to 0.8.5 or later.
go get github.com/gravitl/netmaker@v0.8.5go get github.com/gravitl/netmaker@v0.9.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.8.5 | - |
| 0.9.0 | 0.9.4 | - |
Fixed versions
| 0.8.5 | 0.9.4 |
Sources
- osv: GHSA-6rrw-4fm9-rghv
- https://nvd.nist.gov/vuln/detail/CVE-2022-0664
- https://github.com/gravitl/netmaker/commit/9bee12642986cb9534e268447b70e6f0f03c59cf
- https://github.com/gravitl/netmaker
- https://huntr.dev/bounties/29898a42-fd4f-4b5b-a8e3-ab573cb87eac
CVE-2022-0664 · published · modified · JSON