Go/github.com/grafana/synthetic-monitoring-agent CVE-2022-46156: high 7.2, EPSS 0.51%

Default installation of `synthetic-monitoring-agent` exposes sensitive information

Action: Upgrade github.com/grafana/synthetic-monitoring-agent to 0.12.0 or later.

go get github.com/grafana/synthetic-monitoring-agent@v0.12.0

Affected

Fixed versions

Sources

• osv: GHSA-9j4f-f249-q5w8#Go/github.com/grafana/synthetic-monitoring-agent
• https://github.com/grafana/synthetic-monitoring-agent/security/advisories/GHSA-9j4f-f249-q5w8
• https://nvd.nist.gov/vuln/detail/CVE-2022-46156
• https://github.com/grafana/synthetic-monitoring-agent/pull/373
• https://github.com/grafana/synthetic-monitoring-agent/pull/374
• https://github.com/grafana/synthetic-monitoring-agent/pull/375
• https://github.com/grafana/synthetic-monitoring-agent/commit/d8dc7f9c1c641881cbcf0a09e178b90ebf0f0228
• https://github.com/grafana/synthetic-monitoring-agent
• https://github.com/grafana/synthetic-monitoring-agent/releases/tag/v0.12.0
• https://pkg.go.dev/vuln/GO-2022-1132

CVE-2022-46156 · published 2024-09-06T21:37:02Z · modified 2024-11-18T16:27:10Z · JSON