Go/golang.org/x/crypto CVE-2019-11841: unknown, EPSS 2.00%
Misleading message verification in golang.org/x/crypto/openpgp/clearsign
Action: Upgrade golang.org/x/crypto to 0.0.0-20190424203555-c05e17bb3b2d or later.
go get golang.org/x/crypto@v0.0.0-20190424203555-c05e17bb3b2dAffected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
| 0.0.0-20190424203555-c05e17bb3b2d |
Sources
- osv: GO-2023-1992
- https://go-review.git.corp.google.com/c/crypto/+/173778
- https://go.googlesource.com/crypto/+/c05e17bb3b2dca130fc919668a96b4bec9eb9442
- https://groups.google.com/d/msg/golang-openpgp/6vdgZoTgbIY/K6bBY9z3DAAJ
CVE-2019-11841 · published · modified · JSON