Go/github.com/go-macaron/csrf CVE-2018-25060: unknown, EPSS 0.56%
Insecure generation of cookies in github.com/go-macaron/csrf
Action: Upgrade github.com/go-macaron/csrf to 0.0.0-20180426211050-dadd1711a617 or later.
go get github.com/go-macaron/csrf@v0.0.0-20180426211050-dadd1711a617Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
| 0.0.0-20180426211050-dadd1711a617 |
Sources
- osv: GO-2022-1213
- https://github.com/go-macaron/csrf/pull/7
- https://github.com/go-macaron/csrf/commit/dadd1711a617000b70e5e408a76531b73187031c
CVE-2018-25060 · published · modified · JSON