—
GO-2023-2134
Artifact Hub allows unsafe rego built-in in github.com/artifacthub/hub
Quick fix
GO-2023-2134 — github.com/artifacthub/hub: upgrade to the fixed version with the command below.
go get github.com/artifacthub/hub@v1.16.0Details
Artifact Hub allows unsafe rego built-in in github.com/artifacthub/hub
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/github.com/artifacthub/hub
Introduced in:
0Fixed in: 1.16.0Fix
go get github.com/artifacthub/hub@v1.16.0References
- https://github.com/artifacthub/hub/security/advisories/GHSA-9pc8-m4vp-ggvf[ADVISORY]
- https://nvd.nist.gov/vuln/detail/CVE-2023-45822[ADVISORY]
- https://artifacthub.io/packages/helm/artifact-hub/artifact-hub?modal=changelog&version=1.16.0[WEB]
- https://www.openpolicyagent.org[WEB]
- https://www.openpolicyagent.org/docs/latest/#rego[WEB]