Go/github.com/openshift/osin CVE-2021-4294: medium 5.9
OpenShift OSIN vulnerable to Observable Timing Discrepancy
Action: Upgrade github.com/openshift/osin to 1.0.2-0.20210113124101-8612686d6dda or later.
go get github.com/openshift/osin@v1.0.2-0.20210113124101-8612686d6ddaAffected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.0.2-0.20210113124101-8612686d6dda | - |
Fixed versions
| 1.0.2-0.20210113124101-8612686d6dda |
Sources
- osv: GHSA-m7qp-cj9p-gj85
- https://nvd.nist.gov/vuln/detail/CVE-2021-4294
- https://github.com/openshift/osin/pull/200
- https://github.com/openshift/osin/commit/8612686d6dda34ae9ef6b5a974e4b7accb4fea29
- https://github.com/openshift/osin
- https://pkg.go.dev/vuln/GO-2022-1201
- https://vuldb.com/?ctiid.216987
- https://vuldb.com/?id.216987
CVE-2021-4294 · published · modified · JSON