Go/github.com/flyteorg/flyteadmin CVE-2022-31145: medium 6.5, EPSS 1.03%
FlyteAdmin Insufficient AccessToken Expiration Check
Action: Upgrade github.com/flyteorg/flyteadmin to 1.1.31 or later.
go get github.com/flyteorg/flyteadmin@v1.1.31Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.1.31 | - |
Fixed versions
| 1.1.31 |
Sources
- osv: GHSA-qwrj-9hmp-gpxh
- https://github.com/flyteorg/flyteadmin/security/advisories/GHSA-qwrj-9hmp-gpxh
- https://nvd.nist.gov/vuln/detail/CVE-2022-31145
- https://github.com/flyteorg/flyteadmin/pull/455
- https://github.com/flyteorg/flyteadmin/commit/a1ec282d02706e074bc4986fd0412e5da3b9d00a
- https://github.com/flyteorg/flyteadmin
- https://github.com/flyteorg/flyteadmin/releases/tag/v1.1.31
- https://pkg.go.dev/vuln/GO-2022-0519
CVE-2022-31145 · published · modified · JSON