Go/github.com/zitadel/zitadel-go/v3: medium 5.3
ZITADEL Go's GRPC example code vulnerability - GO-2024-2687 HTTP/2 CONTINUATION flood in net/http
Action: Upgrade github.com/zitadel/zitadel-go/v3 to 3.0.0-next.3 or later.
go get github.com/zitadel/zitadel-go/v3@v3.0.0-next.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.0.0-next.1 | 3.0.0-next.3 | - |
Fixed versions
| 3.0.0-next.3 |
Sources
- osv: GHSA-qc6v-5g5m-8cw2
- https://github.com/zitadel/zitadel-go/security/advisories/GHSA-qc6v-5g5m-8cw2
- https://github.com/zitadel/zitadel-go
- https://github.com/zitadel/zitadel-go/releases/tag/v3.0.0-next.3
- https://pkg.go.dev/vuln/GO-2024-2611
- https://pkg.go.dev/vuln/GO-2024-2631
- https://pkg.go.dev/vuln/GO-2024-2687
- https://www.cve.org/CVERecord?id=CVE-2023-45288
published · modified · JSON