Go/github.com/lf-edge/eve CVE-2023-43631: unknown, EPSS 0.17%

EVE: SSH as Root Unlockable Without Triggering Measured Boot in github.com/lf-edge/eve

Action: Upgrade github.com/lf-edge/eve to 0.0.0-20220708121648-5fef4d92e758 or later.

go get github.com/lf-edge/eve@v0.0.0-20220708121648-5fef4d92e758

Affected

Fixed versions

Sources

• osv: GO-2026-4418
• https://github.com/lf-edge/eve/security/advisories/GHSA-3mq9-xhgq-r7gj
• https://nvd.nist.gov/vuln/detail/CVE-2023-43631
• https://github.com/lf-edge/eve/commit/5fef4d92e75838cc78010edaed5247dfbdae1889
• https://github.com/lf-edge/eve/commit/aa3501d6c57206ced222c33aea15a9169d629141
• https://asrg.io/security-advisories/cve-2023-43631
• https://asrg.io/security-advisories/ssh-as-root-unlockable-without-triggering-measured-boot

CVE-2023-43631 · published 2026-02-05T03:20:45Z · modified 2026-02-05T03:56:11.098888Z · JSON