Go/github.com/agnivade/easy-scrypt CVE-2014-125055: unknown, EPSS 0.74%
easy-scrypt Observable Timing Discrepancy vulnerability in github.com/agnivade/easy-scrypt
Action: Upgrade github.com/agnivade/easy-scrypt to 1.0.0 or later.
go get github.com/agnivade/easy-scrypt@v1.0.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.0.0 | - |
Fixed versions
| 1.0.0 |
Sources
- osv: GO-2023-1294
- https://github.com/advisories/GHSA-r894-5r7v-7rx3
- https://nvd.nist.gov/vuln/detail/CVE-2014-125055
- https://github.com/agnivade/easy-scrypt/commit/477c10cf3b144ddf96526aa09f5fdea613f21812
- https://github.com/agnivade/easy-scrypt/releases/tag/v1.0.0
- https://vuldb.com/?ctiid.217596
- https://vuldb.com/?id.217596
CVE-2014-125055 · published · modified · JSON