Alpine/go: high 7.5

encoding/pem in Go before 1.17.9 and 1.18.x before 1.18.1 has a Decode stack overflow via a large amount of PEM data.

Action: Upgrade go to 1.18.1-r0 or later.

Affected

Fixed versions

Sources

• osv: ALPINE-CVE-2022-24675#Alpine:v3.20/go
• https://security.alpinelinux.org/vuln/CVE-2022-24675

published 2022-04-20T10:15:07.930Z · modified 2026-11-03T07:31:15.071237041Z · JSON