Go/github.com/cea-hpc/sshproxy CVE-2024-34713: low 3.5, EPSS 0.42%
sshproxy vulnerable to SSH option injection
Action: Upgrade github.com/cea-hpc/sshproxy to 1.6.3 or later.
go get github.com/cea-hpc/sshproxy@v1.6.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.6.3 | - |
Fixed versions
| 1.6.3 |
Sources
- osv: GHSA-jmqp-37m5-49wh
- https://github.com/cea-hpc/sshproxy/security/advisories/GHSA-jmqp-37m5-49wh
- https://nvd.nist.gov/vuln/detail/CVE-2024-34713
- https://github.com/cea-hpc/sshproxy/commit/3b8bccc874dc4ca2c80c956cad65722abb46f0b9
- https://github.com/cea-hpc/sshproxy/commit/f7eabd05d5f0f951e160293692327cad9a7d9580
- https://github.com/cea-hpc/sshproxy
CVE-2024-34713 · published · modified · JSON