Go/github.com/slack-go/slack: medium
slack-go `SecretsVerifier` accepts empty signing secret without precondition
Action: Upgrade github.com/slack-go/slack to 0.23.1 or later.
go get github.com/slack-go/slack@v0.23.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.23.1 | - |
Fixed versions
| 0.23.1 |
Sources
- osv: GHSA-gxhx-2686-5h9g
- https://github.com/slack-go/slack/security/advisories/GHSA-gxhx-2686-5h9g
- https://github.com/slack-go/slack/commit/34ad5c052e446f58505ae8d81a2a72821de107cc
- https://github.com/slack-go/slack
- https://github.com/slack-go/slack/releases/tag/v0.23.1
published · modified · JSON