Alpine/go: high 7.5
Certificate.Verify in crypto/x509 in Go 1.18.x before 1.18.1 can be caused to panic on macOS when presented with certain malformed certificates. This allows a remote TLS server to cause a TLS client t
Action: Upgrade go to 1.18.1-r0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.18.0 | 1.18.1-r0 | - |
Fixed versions
| 1.18.1-r0 |
Sources
published · modified · JSON