Go/go.etcd.io/etcd/v3: low
etcd vulnerable to TOCTOU of gateway endpoint authentication
Action: Upgrade go.etcd.io/etcd/v3 to 3.3.23 or later.
go get go.etcd.io/etcd/v3@v3.4.10go get go.etcd.io/etcd/v3@v3.3.23Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.4.0 | 3.4.10 | - |
| 0 | 3.3.23 | - |
Fixed versions
| 3.4.10 | 3.3.23 |
Sources
- osv: GHSA-h8g9-6gvh-5mrc
- https://github.com/etcd-io/etcd/security/advisories/GHSA-h8g9-6gvh-5mrc
- https://github.com/etcd-io/etcd
published · modified · JSON