id: GO-2023-2378
modules:
    - module: github.com/edgelesssys/marblerun
      versions:
        - fixed: 1.4.0
      vulnerable_at: 1.3.0
summary: |-
    Go package github.com/edgelesssys/marblerun CLI commands susceptible to MITM
    attacks
ghsas:
    - GHSA-j3rq-4xjw-xg63
references:
    - advisory: https://github.com/edgelesssys/marblerun/security/advisories/GHSA-j3rq-4xjw-xg63
    - web: https://github.com/edgelesssys/marblerun/releases/tag/v1.4.0
source:
    id: GHSA-j3rq-4xjw-xg63
    created: 2024-08-20T12:20:38.183163-04:00
review_status: UNREVIEWED
unexcluded: EFFECTIVELY_PRIVATE