—
GO-2024-3224
Missing key verification in gost in github.com/ginuerzh/gost
Details
Missing key verification in gost in github.com/ginuerzh/gost
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/github.com/ginuerzh/gost
Introduced in:
0No fixed version published yet for github.com/ginuerzh/gost (go modules). Pin to a known-safe version or switch to an alternative.
References
- https://github.com/advisories/GHSA-8wxx-35qc-vp6r[ADVISORY]
- https://nvd.nist.gov/vuln/detail/CVE-2024-39223[ADVISORY]
- https://github.com/ginuerzh/gost/issues/1034[REPORT]
- https://gist.github.com/nyxfqq/a7242170b1118e78436a62dee4e09e8a[WEB]
- https://github.com/ginuerzh/gost/blob/729d0e70005607dc7c69fc1de62fd8fe21f85355/ssh.go#L229[WEB]