CVE-2022-39222
1 advisory.
Go/github.com/dexidp/dex CVE-2022-39222: critical 9.3, EPSS 1.58%
Dex vulnerable to Man-in-the-Middle allowing ID token capture via intercepted authorization code
Action: Upgrade github.com/dexidp/dex to 2.35.0 or later.
go get github.com/dexidp/dex@v2.35.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.35.0 | - |
Fixed versions
| 2.35.0 |
Sources
- osv: GHSA-vh7g-p26c-j2cw
- https://github.com/dexidp/dex/security/advisories/GHSA-vh7g-p26c-j2cw
- https://nvd.nist.gov/vuln/detail/CVE-2022-39222
- https://github.com/dexidp/dex/commit/49471b14c8080ddb034d4855841123d378b7a634
- https://github.com/dexidp/dex
- https://github.com/dexidp/dex/releases/tag/v2.35.0
CVE-2022-39222 · published · modified · JSON