Go/github.com/zeromicro/go-zero CVE-2024-27302: critical 9.1, EPSS 0.77%
Authorization Bypass Through User-Controlled Key in go-zero
Action: Upgrade github.com/zeromicro/go-zero to 1.4.4 or later.
go get github.com/zeromicro/go-zero@v1.4.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.4.4 | - |
Fixed versions
| 1.4.4 |
Sources
- osv: GHSA-fgxv-gw55-r5fq
- https://github.com/zeromicro/go-zero/security/advisories/GHSA-fgxv-gw55-r5fq
- https://nvd.nist.gov/vuln/detail/CVE-2024-27302
- https://github.com/zeromicro/go-zero/commit/d9d79e930dff6218a873f4f02115df61c38b15db
- https://github.com/zeromicro/go-zero
CVE-2024-27302 · published · modified · JSON