packages:
  - module: github.com/flyteorg/flyteadmin
    package: github.com/flyteorg/flyteadmin/auth/authzserver
    symbols:
      - ResourceServer.ValidateAccessToken
    versions:
      - fixed: 1.1.31
    vulnerable_at: 1.1.30
description: |
    Improper validation of access tokens can permit use of expired tokens.
cves:
  - CVE-2022-31145
ghsas:
  - GHSA-qwrj-9hmp-gpxh
links:
    commit: https://github.com/flyteorg/flyteadmin/commit/a1ec282d02706e074bc4986fd0412e5da3b9d00a