Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

CVE-2022-41912 #71

Closed
nitrocb opened this issue May 8, 2024 · 0 comments
Closed

CVE-2022-41912 #71

nitrocb opened this issue May 8, 2024 · 0 comments

Comments

@nitrocb
Copy link

nitrocb commented May 8, 2024

Plutono is still using the following module:

github.com/crewjam/saml - v0.4.6-0.20201227203850-bca570abb2ce

Code-Reference:

plutono/go.mod

Line 25 in e9e6b22

github.com/crewjam/saml v0.4.6-0.20201227203850-bca570abb2ce

This module contains CVE-2022-41912, which has been scored critical:
https://nvd.nist.gov/vuln/detail/CVE-2022-41912

This issue has been fixed with crewjam/saml version v0.4.9 and onwards. Newest version is v0.4.14.

Would be nice, if this could be bumped.
Thanks in advance!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant