tocsin

Go/github.com/hashicorp/vault CVE-2023-25000: unknown, EPSS 0.21%

Cache-timing attacks in Shamir's secret sharing in github.com/hashicorp/vault

Action: Upgrade github.com/hashicorp/vault to 1.11.9 or later.

go get github.com/hashicorp/vault@v1.11.9
go get github.com/hashicorp/vault@v1.12.5
go get github.com/hashicorp/vault@v1.13.1

Affected

introducedfixedlast affected
01.11.9-
1.12.01.12.5-
1.13.01.13.1-

Fixed versions

1.11.91.12.51.13.1

Sources

CVE-2023-25000 · published · modified · JSON