{"action":"Upgrade github.com/flyteorg/flyteadmin to 1.1.44 or later.","affected":[{"fixed":"1.1.44","introduced":"1.0.0"}],"component":"github.com/flyteorg/flyteadmin","cve_ids":["CVE-2022-39273"],"ecosystem":"Go","epss":0.00926,"exploited":false,"fixed_versions":["1.1.44"],"ghsa_id":"GHSA-67x4-qr35-qvrm","id":"tcs_01M5KFXNZA78BP5MKQN6R3TQH4","modified_at":"2024-05-20T16:03:47Z","published_at":"2022-10-31T17:09:13Z","references":["https://osv.dev/vulnerability/GO-2022-1043","https://github.com/advisories/GHSA-67x4-qr35-qvrm","https://github.com/flyteorg/flyteadmin/pull/478","https://docs.flyte.org/en/latest/deployment/cluster_config/auth_setup.html#oauth2-authorization-server"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2022-1043","url":"https://osv.dev/vulnerability/GO-2022-1043"}],"summary":"Hardcoded hashed password in github.com/flyteorg/flyteadmin"}