Go/github.com/flyteorg/flyteadmin CVE-2022-39273: unknown, EPSS 0.93%
Hardcoded hashed password in github.com/flyteorg/flyteadmin
Action: Upgrade github.com/flyteorg/flyteadmin to 1.1.44 or later.
go get github.com/flyteorg/flyteadmin@v1.1.44Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.0.0 | 1.1.44 | - |
Fixed versions
| 1.1.44 |
Sources
- osv: GO-2022-1043
- https://github.com/advisories/GHSA-67x4-qr35-qvrm
- https://github.com/flyteorg/flyteadmin/pull/478
- https://docs.flyte.org/en/latest/deployment/cluster_config/auth_setup.html#oauth2-authorization-server
CVE-2022-39273 · published · modified · JSON