—
GO-2022-0794
Weave Net clusters susceptible to MitM attacks via IPv6 rogue router advertisements in github.com/weaveworks/weave
Quick fix
GO-2022-0794 — github.com/weaveworks/weave: upgrade to the fixed version with the command below.
go get github.com/weaveworks/weave@v2.6.3+incompatibleDetails
Weave Net clusters susceptible to MitM attacks via IPv6 rogue router advertisements in github.com/weaveworks/weave
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/github.com/weaveworks/weave
Introduced in:
0Fixed in: 2.6.3+incompatibleFix
go get github.com/weaveworks/weave@v2.6.3+incompatible