Go/github.com/ginuerzh/gost CVE-2024-39223: critical 9.8, EPSS 0.70%
Missing key verification in gost
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 2.11.5 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-8wxx-35qc-vp6r
- https://nvd.nist.gov/vuln/detail/CVE-2024-39223
- https://github.com/ginuerzh/gost/issues/1034
- https://gist.github.com/nyxfqq/a7242170b1118e78436a62dee4e09e8a
- https://github.com/ginuerzh/gost
- https://github.com/ginuerzh/gost/blob/729d0e70005607dc7c69fc1de62fd8fe21f85355/ssh.go#L229
CVE-2024-39223 · published · modified · JSON