| id: GO-2024-2836 |
| modules: |
| - module: github.com/cea-hpc/sshproxy |
| versions: |
| - fixed: 1.6.3 |
| vulnerable_at: 1.6.2 |
| summary: sshproxy vulnerable to SSH option injection in github.com/cea-hpc/sshproxy |
| cves: |
| - CVE-2024-34713 |
| ghsas: |
| - GHSA-jmqp-37m5-49wh |
| references: |
| - advisory: https://github.com/cea-hpc/sshproxy/security/advisories/GHSA-jmqp-37m5-49wh |
| - advisory: https://nvd.nist.gov/vuln/detail/CVE-2024-34713 |
| - fix: https://github.com/cea-hpc/sshproxy/commit/3b8bccc874dc4ca2c80c956cad65722abb46f0b9 |
| - fix: https://github.com/cea-hpc/sshproxy/commit/f7eabd05d5f0f951e160293692327cad9a7d9580 |
| source: |
| id: GHSA-jmqp-37m5-49wh |
| created: 2024-05-17T16:09:33.514363-04:00 |
| review_status: UNREVIEWED |
