Go/github.com/lf-edge/eve CVE-2023-43637: unknown, EPSS 0.14%

EVE Has Partially Predetermined Vault Key in github.com/lf-edge/eve

Action: Upgrade github.com/lf-edge/eve to 0.0.0-20220310190112-c0c966dc31e2 or later.

go get github.com/lf-edge/eve@v0.0.0-20220310190112-c0c966dc31e2

Affected

Fixed versions

Sources

• osv: GO-2026-4436
• https://github.com/lf-edge/eve/security/advisories/GHSA-g7vp-j25f-h34p
• https://nvd.nist.gov/vuln/detail/CVE-2023-43637
• https://github.com/lf-edge/eve/commit/c0c966dc31e2ed9aafc155e6be646adb14756c01
• https://asrg.io/security-advisories/cve-2023-43637
• https://asrg.io/security-advisories/vault-key-partially-predetermined

CVE-2023-43637 · published 2026-02-17T18:09:06Z · modified 2026-02-19T20:41:23.893760Z · JSON