Go/github.com/rancher/wrangler CVE-2022-43756: medium 5.9, EPSS 0.68%

Denial of service (DoS) when processing Git credentials

Action: Upgrade github.com/rancher/wrangler to 0.7.4-security1 or later.

go get github.com/rancher/wrangler@v0.7.4-security1

go get github.com/rancher/wrangler@v0.8.5-security1

go get github.com/rancher/wrangler@v1.0.1

go get github.com/rancher/wrangler@v0.8.11

Affected

Fixed versions

Sources

• osv: GHSA-8fcj-gf77-47mg
• https://github.com/rancher/wrangler/security/advisories/GHSA-8fcj-gf77-47mg
• https://nvd.nist.gov/vuln/detail/CVE-2022-43756
• https://github.com/rancher/wrangler/commit/341018c8fef3e12867c7cb2649bd2cecac75f287
• https://bugzilla.suse.com/show_bug.cgi?id=1205296
• https://github.com/advisories/GHSA-8fcj-gf77-47mg
• https://github.com/rancher/rancher/security/policy
• https://github.com/rancher/wrangler
• https://pkg.go.dev/vuln/GO-2023-1515

CVE-2022-43756 · published 2023-01-25T19:40:26Z · modified 2023-11-08T04:10:46.341625Z · JSON