blob: f4c2d95e8928f2fc3667e7e8b7b437c23bffea7d [file] [log] [blame]
id: GO-2024-3011
modules:
- module: github.com/prest/prest
versions:
- fixed: 1.5.4
vulnerable_at: 1.5.3
summary: pREST vulnerable to jwt bypass + sql injection in github.com/prest/prest
ghsas:
- GHSA-wm25-j4gw-6vr3
references:
- advisory: https://github.com/prest/prest/security/advisories/GHSA-wm25-j4gw-6vr3
- fix: https://github.com/prest/prest/commit/96ff96cfdc7ad6dd86e2289fcd5a37ee70c8926e
source:
id: GHSA-wm25-j4gw-6vr3
created: 2024-08-05T17:08:33.256457-04:00
review_status: UNREVIEWED