VDB
Sign up
—

GO-2024-3058

Gorush uses deprecated TLS versions in github.com/appleboy/gorush

Quick fix

GO-2024-3058 — github.com/appleboy/gorush: upgrade to the fixed version with the command below.

go get github.com/appleboy/gorush@v1.18.5

Details

An issue in the RunHTTPServer function in Gorush allows attackers to intercept and manipulate data due to the use of a deprecated TLS version.

Are you affected?

Enter the version of the package you're using.

Affected packages

Go/github.com/appleboy/gorush
Introduced in: 0Fixed in: 1.18.5
Fixgo get github.com/appleboy/gorush@v1.18.5

References