CVE-2020-0601
1 advisory.
Go/stdlib CVE-2020-0601: unknown, exploited
Certificate validation bypass on Windows in crypto/x509
Action: Upgrade stdlib to 1.12.16 or later.
Upgrade Go to 1.12.16.
Upgrade Go to 1.13.7.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.12.16 | - |
| 1.13.0-0 | 1.13.7 | - |
Fixed versions
| 1.12.16 | 1.13.7 |
Sources
- osv: GO-2022-0535
- kev: CVE-2020-0601
- https://go.dev/cl/215905
- https://go.googlesource.com/go/+/953bc8f391a63adf00bac2515dba62abe8a1e2c2
- https://go.dev/issue/36834
- https://groups.google.com/g/golang-announce/c/Hsw4mHYc470/m/WJeW5wguEgAJ
CVE-2020-0601 · published · modified · JSON