Go/github.com/spacemeshos/api/release/go CVE-2024-34360: unknown, EPSS 0.73%

ATX protocol validation problem in github.com/spacemeshos/go-spacemesh

Action: Upgrade github.com/spacemeshos/api/release/go to 1.37.1 or later.

go get github.com/spacemeshos/api/release/go@v1.37.1

Affected

Fixed versions

Sources

• osv: GO-2024-2831
• https://github.com/spacemeshos/go-spacemesh/security/advisories/GHSA-jcqq-g64v-gcm7
• https://github.com/spacemeshos/api/commit/1d5bd972bbe225d024c3e0ae5214ddb6b481716e
• https://github.com/spacemeshos/go-spacemesh/commit/9aff88d54be809ac43d60e8a8b4d65359c356b87
• https://spacemesh.io/blog/spacemesh-white-paper-1

CVE-2024-34360 · published 2024-05-14T16:33:28Z · modified 2024-05-20T16:03:47Z · JSON