tocsin

Go/github.com/hashicorp/vault CVE-2022-41316: unknown, EPSS 0.52%

HashiCorp Vault's revocation list not respected in github.com/hashicorp/vault

Action: Upgrade github.com/hashicorp/vault to 1.9.10 or later.

go get github.com/hashicorp/vault@v1.9.10
go get github.com/hashicorp/vault@v1.10.7
go get github.com/hashicorp/vault@v1.11.4

Affected

introducedfixedlast affected
01.9.10-
1.10.01.10.7-
1.11.01.11.4-

Fixed versions

1.9.101.10.71.11.4

Sources

CVE-2022-41316 · published · modified · JSON