—
GO-2024-3188
Authd allows attacker-controlled usernames to yield controllable UIDs in github.com/ubuntu/authd
Quick fix
GO-2024-3188 — github.com/ubuntu/authd: upgrade to the fixed version with the command below.
go get github.com/ubuntu/authd@v0.3.6Details
Authd allows attacker-controlled usernames to yield controllable UIDs in github.com/ubuntu/authd
Are you affected?
Enter the version of the package you're using.