MEDIUM5.9
GO-2021-0178
Cleartext transmission of credentials in net/smtp
Quick fix
GO-2021-0178 — stdlib: upgrade to the fixed version with the command below.
go get stdlib@v1.8.4Details
SMTP clients using net/smtp can use the PLAIN authentication scheme on network connections not secured with TLS, exposing passwords to man-in-the-middle SMTP servers.
Are you affected?
Enter the version of the package you're using.