Go/github.com/google/go-attestation CVE-2022-0317: medium 4, EPSS 0.10%
Go-Attestation Improper Input Validation with attacker-controlled TPM Quote
Action: Upgrade github.com/google/go-attestation to 0.4.0 or later.
go get github.com/google/go-attestation@v0.4.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.4.0 | - |
Fixed versions
| 0.4.0 |
Sources
- osv: GHSA-99cg-575x-774p
- https://github.com/google/go-attestation/security/advisories/GHSA-99cg-575x-774p
- https://nvd.nist.gov/vuln/detail/CVE-2022-0317
- https://github.com/google/go-attestation/commit/82f2c9c2c76e1d3691d17ee78116d1d93a123788
- https://github.com/google/go-attestation
- https://pkg.go.dev/vuln/GO-2022-0294
CVE-2022-0317 · published · modified · JSON