—
GO-2023-1925
Weave GitOps Terraform Controller Information Disclosure Vulnerability in github.com/weaveworks/tf-controller
Quick fix
GO-2023-1925 — github.com/weaveworks/tf-controller: upgrade to the fixed version with the command below.
go get github.com/weaveworks/tf-controller@v0.14.4Details
Weave GitOps Terraform Controller Information Disclosure Vulnerability in github.com/weaveworks/tf-controller
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/github.com/weaveworks/tf-controller
Introduced in:
0Fixed in: 0.14.4Fix
go get github.com/weaveworks/tf-controller@v0.14.4References
- https://github.com/weaveworks/tf-controller/security/advisories/GHSA-6hvv-j432-23cv[ADVISORY]
- https://nvd.nist.gov/vuln/detail/CVE-2023-34236[ADVISORY]
- https://github.com/weaveworks/tf-controller/commit/28282bc644054e157c3b9a3d38f1f9551ce09074[FIX]
- https://github.com/weaveworks/tf-controller/commit/6323b355bd7f5d2ce85d0244fe0883af3881df4e[FIX]
- https://github.com/weaveworks/tf-controller/commit/9708fda28ccd0466cb0a8fd409854ab4d92f7dca[FIX]
- https://github.com/weaveworks/tf-controller/commit/98a0688036e9dbcf43fa84960d9a1ef3e09a69cf[FIX]
- https://github.com/weaveworks/tf-controller/issues/637[REPORT]
- https://github.com/weaveworks/tf-controller/issues/649[REPORT]