Debian/golang-github-gorilla-schema: high 7.5
gorilla/schema converts structs to and from form values. Prior to version 1.4.1 Running `schema.Decoder.Decode()` on a struct that has a field of type `[]struct{...}` opens it up to malicious attacks
Action: Upgrade golang-github-gorilla-schema to 1.4.1-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.4.1-1 | - |
Fixed versions
| 1.4.1-1 |
Sources
- osv: DEBIAN-CVE-2024-37298#Debian:13/golang-github-gorilla-schema
- https://security-tracker.debian.org/tracker/CVE-2024-37298
published · modified · JSON