Go/github.com/hashicorp/vault CVE-2020-25816: medium 6.8, EPSS 1.01%

Token leases could outlive their TTL in HashiCorp Vault in github.com/hashicorp/vault

Action: Upgrade github.com/hashicorp/vault to 1.5.4 or later.

go get github.com/hashicorp/vault@v1.5.4

Affected

Fixed versions

Sources

• osv: GO-2024-2514
• nvd: CVE-2020-25816
• https://github.com/advisories/GHSA-57gg-cj55-q5g2
• https://github.com/hashicorp/vault/pull/10020/commits/f192878110fe93eb13da914b2bee28caa7866a29
• https://github.com/hashicorp/vault/blob/master/CHANGELOG.md#147
• https://github.com/hashicorp/vault/blob/master/CHANGELOG.md#154
• https://www.hashicorp.com/blog/category/vault

CVE-2020-25816 · published 2024-06-28T15:28:53Z · modified 2026-03-03T04:54:36.059515Z · JSON