Go/github.com/edgelesssys/marblerun: unknown

MarbleRun unauthenticated recovery allows Coordinator impersonation in github.com/edgelesssys/marblerun

Action: Upgrade github.com/edgelesssys/marblerun to 1.7.0 or later.

go get github.com/edgelesssys/marblerun@v1.7.0

Affected

Fixed versions

Sources

• osv: GO-2025-3450
• https://github.com/edgelesssys/marblerun/security/advisories/GHSA-w7wm-2425-7p2h
• https://github.com/edgelesssys/marblerun/commit/e4864f9f1d0f12a4a7d28514da43bcc75603a5b5
• https://github.com/edgelesssys/marblerun/releases/tag/v1.7.0

published 2025-02-05T23:27:43Z · modified 2026-03-03T04:56:13.944991Z · JSON