—
GO-2022-0798
Privilege escalation in rbac in github.com/google/exposure-notifications-verification-server
Quick fix
GO-2022-0798 — github.com/google/exposure-notifications-verification-server: upgrade to the fixed version with the command below.
go get github.com/google/exposure-notifications-verification-server@v0.23.1Details
Privilege escalation in rbac in github.com/google/exposure-notifications-verification-server
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/github.com/google/exposure-notifications-verification-server
Introduced in:
0Fixed in: 0.23.1Fix
go get github.com/google/exposure-notifications-verification-server@v0.23.1References
- https://github.com/google/exposure-notifications-verification-server/security/advisories/GHSA-5v95-v8c8-3rh6[ADVISORY]
- https://nvd.nist.gov/vuln/detail/CVE-2021-22538[ADVISORY]
- https://github.com/google/exposure-notifications-verification-server/commit/eb8cf40b12dbe79304f1133c06fb73419383cd95[FIX]
- https://github.com/google/exposure-notifications-verification-server/releases/tag/v0.23.1[WEB]
- https://github.com/google/exposure-notifications-verification-server/releases/tag/v0.24.0[WEB]