Go/github.com/oam-dev/kubevela CVE-2022-39383: unknown, EPSS 0.42%
Server-side request forgery in github.com/oam-dev/kubevela
Action: Upgrade github.com/oam-dev/kubevela to 1.5.8 or later.
go get github.com/oam-dev/kubevela@v1.5.8go get github.com/oam-dev/kubevela@v1.6.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.5.8 | - |
| 1.6.0 | 1.6.1 | - |
Fixed versions
| 1.5.8 | 1.6.1 |
Sources
- osv: GO-2022-1113
- https://github.com/kubevela/kubevela/security/advisories/GHSA-m5xf-x7q6-3rm7
- https://github.com/kubevela/kubevela/pull/5000
CVE-2022-39383 · published · modified · JSON