Go/github.com/appleboy/gorush CVE-2024-41270: medium 5.3, EPSS 0.31%
Gorush uses deprecated TLS versions
Action: Upgrade github.com/appleboy/gorush to 1.18.5 or later.
go get github.com/appleboy/gorush@v1.18.5Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.18.5 | - |
Fixed versions
| 1.18.5 |
Sources
- osv: GHSA-p3pf-mff8-3h47
- https://nvd.nist.gov/vuln/detail/CVE-2024-41270
- https://github.com/appleboy/gorush/issues/792
- https://github.com/appleboy/gorush/commit/067cb597e485e40b790a267187bf7f00730b1c4b
- https://gist.github.com/nyxfqq/cfae38fada582a0f576d154be1aeb1fc
- https://github.com/appleboy/gorush
CVE-2024-41270 · published · modified · JSON