Go/github.com/cloudflare/cfrpki CVE-2021-3907: low, EPSS 4.20%
Path traversal in github.com/cloudflare/cfrpki/cmd/octorpki
Action: Upgrade github.com/cloudflare/cfrpki to 1.4.3 or later.
go get github.com/cloudflare/cfrpki@v1.4.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.4.3 | - |
Fixed versions
| 1.4.3 |
Sources
- osv: GHSA-8459-6rc9-8vf8
- https://github.com/cloudflare/cfrpki/security/advisories/GHSA-8459-6rc9-8vf8
- https://github.com/cloudflare/cfrpki/commit/a053a808feeb3115c76b6cc263ee55598ce6e8cd
- https://github.com/cloudflare/cfrpki/commit/eb9cc4db7b7b79e44f56dfaa959fccdfb2af8284
- https://github.com/cloudflare/cfrpki
- https://github.com/cloudflare/cfrpki/releases/tag/v1.4.3
CVE-2021-3907 · published · modified · JSON