Go/github.com/hybridgroup/gobot CVE-2019-12496: high 7.5, EPSS 0.71%
Hybrid Group Gobot Improper Certificate Validation vulnerability
Action: Upgrade github.com/hybridgroup/gobot to 1.12.1-0.20190521122906-c1aa4f867846 or later.
go get github.com/hybridgroup/gobot@v1.12.1-0.20190521122906-c1aa4f867846Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.12.1-0.20190521122906-c1aa4f867846 | - |
Fixed versions
| 1.12.1-0.20190521122906-c1aa4f867846 |
Sources
- osv: GHSA-vfxc-r2gx-v2vq
- https://nvd.nist.gov/vuln/detail/CVE-2019-12496
- https://github.com/hybridgroup/gobot/commit/c1aa4f867846da4669ecf3bc3318bd96b7ee6f3f
- https://github.com/hybridgroup/gobot
- https://github.com/hybridgroup/gobot/compare/ed53198...7f973df
- https://github.com/hybridgroup/gobot/releases/tag/v1.13.0
- https://pkg.go.dev/vuln/GO-2021-0083
CVE-2019-12496 · published · modified · JSON