—
GO-2024-3057
NetBird uses a static initialization vector (IV) in github.com/netbirdio/netbird
Quick fix
GO-2024-3057 — github.com/netbirdio/netbird: upgrade to the fixed version with the command below.
go get github.com/netbirdio/netbird@v0.29.2Details
NetBird uses a static initialization vector (IV) in github.com/netbirdio/netbird
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/github.com/netbirdio/netbird
Introduced in:
0.23.2Fixed in: 0.29.2Fix
go get github.com/netbirdio/netbird@v0.29.2References
- https://github.com/advisories/GHSA-9v35-4xcr-w9ph[ADVISORY]
- https://nvd.nist.gov/vuln/detail/CVE-2024-41260[ADVISORY]
- https://github.com/netbirdio/netbird/commit/cf6210a6f42355e88c422c624376f6fcdaea6729[FIX]
- https://github.com/netbirdio/netbird/pull/2569[FIX]
- https://github.com/netbirdio/netbird/issues/2246[REPORT]
- https://gist.github.com/nyxfqq/92232108ac153e95d538bb17fc5ad636[WEB]