—
GO-2022-0939
Improper Neutralization of Special Elements used in an LDAP Query in stevenweathers/thunderdome-planning-poker in github.com/StevenWeathers/thunderdome-planning-poker
Quick fix
GO-2022-0939 — github.com/StevenWeathers/thunderdome-planning-poker: upgrade to the fixed version with the command below.
go get github.com/StevenWeathers/thunderdome-planning-poker@v1.16.3Details
Improper Neutralization of Special Elements used in an LDAP Query in stevenweathers/thunderdome-planning-poker in github.com/StevenWeathers/thunderdome-planning-poker
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/github.com/StevenWeathers/thunderdome-planning-poker
Introduced in:
0Fixed in: 1.16.3Fix
go get github.com/StevenWeathers/thunderdome-planning-poker@v1.16.3References
- https://github.com/StevenWeathers/thunderdome-planning-poker/security/advisories/GHSA-26cm-qrc6-mfgj[ADVISORY]
- https://nvd.nist.gov/vuln/detail/CVE-2021-41232[ADVISORY]
- https://github.com/StevenWeathers/thunderdome-planning-poker/commit/f1524d01e8a0f2d6c3db5461c742456c692dd8c1[FIX]
- https://github.com/github/securitylab/issues/464#issuecomment-957094994[WEB]