Go/github.com/stacklok/minder CVE-2024-35185: unknown, EPSS 0.46%
Denial of service of Minder Server with attacker-controlled REST endpoint in github.com/stacklok/minder
Action: Upgrade github.com/stacklok/minder to 0.0.49 or later.
go get github.com/stacklok/minder@v0.0.49Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.0.49 | - |
Fixed versions
| 0.0.49 |
Sources
- osv: GO-2024-2864
- https://github.com/stacklok/minder/security/advisories/GHSA-fjw8-3gp8-4cvx
- https://nvd.nist.gov/vuln/detail/CVE-2024-35185
- https://github.com/stacklok/minder/commit/065049336aac0621ee00a0bb2211f8051d47c14b
CVE-2024-35185 · published · modified · JSON