modules:
  - module: github.com/flyteorg/flyteadmin
    versions:
      - fixed: 1.1.31
    vulnerable_at: 1.1.30
    packages:
      - package: github.com/flyteorg/flyteadmin/auth/authzserver
        symbols:
          - ResourceServer.ValidateAccessToken
description: |
    Improper validation of access tokens can permit use of expired tokens.
published: 2022-07-30T03:51:07Z
cves:
  - CVE-2022-31145
ghsas:
  - GHSA-qwrj-9hmp-gpxh
references:
  - fix: https://github.com/flyteorg/flyteadmin/commit/a1ec282d02706e074bc4986fd0412e5da3b9d00a