Go/github.com/edgelesssys/constellation/v2: high
User data in TPM attestation vulnerable to MITM
Action: Upgrade github.com/edgelesssys/constellation/v2 to 2.5.2 or later.
go get github.com/edgelesssys/constellation/v2@v2.5.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.5.2 | - |
Fixed versions
| 2.5.2 |
Sources
- osv: GHSA-r2h5-3hgw-8j34
- https://github.com/edgelesssys/constellation/security/advisories/GHSA-r2h5-3hgw-8j34
- https://github.com/edgelesssys/constellation
- https://github.com/edgelesssys/constellation/releases/tag/v2.5.2
published · modified · JSON