Go/github.com/stripe/smokescreen CVE-2022-24825: medium 5.8, EPSS 0.93%
Smokescreen SSRF via deny list bypass
Action: Upgrade github.com/stripe/smokescreen to 0.0.3 or later.
go get github.com/stripe/smokescreen@v0.0.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.0.3 | - |
Fixed versions
| 0.0.3 |
Sources
- osv: GHSA-gcj7-j438-hjj2
- https://github.com/stripe/smokescreen/security/advisories/GHSA-gcj7-j438-hjj2
- https://nvd.nist.gov/vuln/detail/CVE-2022-24825
- https://github.com/stripe/smokescreen/commit/fafb6ae48c6c40aa011d87b61306abc48db8797b
CVE-2022-24825 · published · modified · JSON