—
GO-2022-0824
Improper Input Validation in vault-ssh-helper in github.com/hashicorp/vault-ssh-helper
Quick fix
GO-2022-0824 — github.com/hashicorp/vault-ssh-helper: upgrade to the fixed version with the command below.
go get github.com/hashicorp/vault-ssh-helper@v0.2.0Details
Improper Input Validation in vault-ssh-helper in github.com/hashicorp/vault-ssh-helper
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/github.com/hashicorp/vault-ssh-helper
Introduced in:
0Fixed in: 0.2.0Fix
go get github.com/hashicorp/vault-ssh-helper@v0.2.0References
- https://github.com/advisories/GHSA-f9fq-vjvh-779p[ADVISORY]
- https://nvd.nist.gov/vuln/detail/CVE-2020-24359[ADVISORY]
- https://github.com/hashicorp/vault-ssh-helper/commit/83effd08cbcbe4b993d776bd9b39465cd9e4603f[FIX]
- https://github.com/hashicorp/vault-ssh-helper/blob/master/CHANGELOG.md#020-august-19-2020[WEB]
- https://github.com/hashicorp/vault-ssh-helper/releases[WEB]