blob: 868d8f367b1703af87d2e55dbca15082c7a506e1 [file] [log] [blame]
modules:
- module: github.com/flyteorg/flyteadmin
versions:
- fixed: 1.1.31
vulnerable_at: 1.1.30
packages:
- package: github.com/flyteorg/flyteadmin/auth/authzserver
symbols:
- ResourceServer.ValidateAccessToken
summary: 'TODO(https://go.dev/issue/56443): fill in summary field'
description: |
Improper validation of access tokens can permit use of expired tokens.
published: 2022-07-30T03:51:07Z
cves:
- CVE-2022-31145
ghsas:
- GHSA-qwrj-9hmp-gpxh
references:
- fix: https://github.com/flyteorg/flyteadmin/commit/a1ec282d02706e074bc4986fd0412e5da3b9d00a