CVE-2024-38351
2 advisories.
Go/github.com/pocketbase/pocketbase CVE-2024-38351: medium 5.4, EPSS 0.32%
PocketBase performs password auth and OAuth2 unverified email linking
Action: Upgrade github.com/pocketbase/pocketbase to 0.22.14 or later.
go get github.com/pocketbase/pocketbase@v0.22.14Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.22.14 | - |
Fixed versions
| 0.22.14 |
Sources
- osv: GHSA-m93w-4fxv-r35v
- https://github.com/pocketbase/pocketbase/security/advisories/GHSA-m93w-4fxv-r35v
- https://nvd.nist.gov/vuln/detail/CVE-2024-38351
- https://github.com/pocketbase/pocketbase/commit/58ace5d5e7b9b979490019cf8d1b88491e5daec5
- https://github.com/pocketbase/pocketbase
- https://github.com/pocketbase/pocketbase/discussions/4355
CVE-2024-38351 · published · modified · JSON
Go/github.com/pocketbase/pocketbase CVE-2024-38351: unknown, EPSS 0.32%
PocketBase performs password auth and OAuth2 unverified email linking in github.com/pocketbase/pocketbase
Action: Upgrade github.com/pocketbase/pocketbase to 0.22.14 or later.
go get github.com/pocketbase/pocketbase@v0.22.14Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.22.14 | - |
Fixed versions
| 0.22.14 |
Sources
- osv: GO-2024-2936
- https://github.com/pocketbase/pocketbase/security/advisories/GHSA-m93w-4fxv-r35v
- https://github.com/pocketbase/pocketbase/commit/58ace5d5e7b9b979490019cf8d1b88491e5daec5
- https://github.com/pocketbase/pocketbase/discussions/4355
CVE-2024-38351 · published · modified · JSON