Go/github.com/weaveworks/weave-gitops CVE-2022-23509: high 7.3, EPSS 0.25%

Gitops Run insecure communication

Action: Upgrade github.com/weaveworks/weave-gitops to 0.12.0 or later.

go get github.com/weaveworks/weave-gitops@v0.12.0

Affected

Fixed versions

Sources

• osv: GHSA-89qm-wcmw-3mgg
• https://github.com/weaveworks/weave-gitops/security/advisories/GHSA-89qm-wcmw-3mgg
• https://nvd.nist.gov/vuln/detail/CVE-2022-23509
• https://github.com/weaveworks/weave-gitops/pull/3098/commits/babd91574b99b310b84aeec9f8f895bd18acb967
• https://github.com/weaveworks/weave-gitops/pull/3106/commits/ce2bbff0a3609c33396050ed544a5a21f8d0797f
• https://github.com/weaveworks/weave-gitops

CVE-2022-23509 · published 2023-01-09T19:45:35Z · modified 2024-08-20T20:58:32.192350Z · JSON