HIGH

GHSA-5r5w-h76p-m726

Use of a Broken or Risky Cryptographic Algorithm in Max Mazurov Maddy

Quick fix

GHSA-5r5w-h76p-m726 — github.com/foxcpp/maddy: upgrade to the fixed version with the command below.

go get github.com/foxcpp/maddy@v0.5.2

Details

A Broken or Risky Cryptographic Algorithm exists in Max Mazurov Maddy before 0.5.2, which is an unnecessary risk that may result in the exposure of sensitive information.

Are you affected?

Enter the version of the package you're using.

Affected packages

Go/github.com/foxcpp/maddy

Introduced in: 0Fixed in: 0.5.2

Fixgo get github.com/foxcpp/maddy@v0.5.2

References

https://nvd.nist.gov/vuln/detail/CVE-2021-42583[ADVISORY]
https://github.com/foxcpp/maddy[PACKAGE]
https://github.com/foxcpp/maddy/blob/df40dce1284cd0fd0a9e8e7894029553d653d0a5/internal/auth/shadow/verify.go[WEB]
https://github.com/foxcpp/maddy/releases/tag/v0.5.2[WEB]