CVE-2024-35238
2 advisories.
Go/github.com/stacklok/minder CVE-2024-35238: medium 5.3, EPSS 0.53%
Denial of service of Minder Server from maliciously crafted GitHub attestations
Action: Upgrade github.com/stacklok/minder to 0.0.51 or later.
go get github.com/stacklok/minder@v0.0.51Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.0.51 | - |
Fixed versions
| 0.0.51 |
Sources
- osv: GHSA-8fmj-33gw-g7pw
- https://github.com/stacklok/minder/security/advisories/GHSA-8fmj-33gw-g7pw
- https://nvd.nist.gov/vuln/detail/CVE-2024-35238
- https://github.com/stacklok/minder/commit/fe321d345b4f738de6a06b13207addc72b59f892
- https://github.com/stacklok/minder
- https://github.com/stacklok/minder/blob/daccbc12e364e2d407d56b87a13f7bb24cbdb074/internal/verifier/sigstore/container/container.go#L271-L300
CVE-2024-35238 · published · modified · JSON
Go/github.com/stacklok/minder CVE-2024-35238: unknown, EPSS 0.53%
Denial of service of Minder Server from maliciously crafted GitHub attestations in github.com/stacklok/minder
Action: Upgrade github.com/stacklok/minder to 0.0.51 or later.
go get github.com/stacklok/minder@v0.0.51Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.0.51 | - |
Fixed versions
| 0.0.51 |
Sources
- osv: GO-2024-2885
- https://github.com/stacklok/minder/security/advisories/GHSA-8fmj-33gw-g7pw
- https://nvd.nist.gov/vuln/detail/CVE-2024-35238
- https://github.com/stacklok/minder/commit/fe321d345b4f738de6a06b13207addc72b59f892
- https://github.com/stacklok/minder/blob/daccbc12e364e2d407d56b87a13f7bb24cbdb074/internal/verifier/sigstore/container/container.go#L271-L300
CVE-2024-35238 · published · modified · JSON