blob: fdece552de3f9f2c6718a6233468ae99111f4685 [file] [log] [blame]
id: GO-2023-2378
modules:
- module: github.com/edgelesssys/marblerun
versions:
- fixed: 1.4.0
vulnerable_at: 1.3.0
summary: |-
Go package github.com/edgelesssys/marblerun CLI commands susceptible to MITM
attacks
ghsas:
- GHSA-j3rq-4xjw-xg63
references:
- advisory: https://github.com/edgelesssys/marblerun/security/advisories/GHSA-j3rq-4xjw-xg63
- web: https://github.com/edgelesssys/marblerun/releases/tag/v1.4.0
source:
id: GHSA-j3rq-4xjw-xg63
created: 2024-08-20T12:20:38.183163-04:00
review_status: UNREVIEWED
unexcluded: EFFECTIVELY_PRIVATE