Alpine/go: high 7.5

The generic P-256 feature in crypto/elliptic in Go before 1.17.9 and 1.18.x before 1.18.1 allows a panic via long scalar input.

Action: Upgrade go to 1.18.1-r0 or later.

Affected

Fixed versions

Sources

• osv: ALPINE-CVE-2022-28327#Alpine:v3.17/go
• https://security.alpinelinux.org/vuln/CVE-2022-28327

published 2022-04-20T10:15:08.030Z · modified 2026-11-03T07:30:36.805995142Z · JSON