—
GO-2024-2583
Encryption bypass in github.com/edgelesssys/marblerun
Quick fix
GO-2024-2583 — github.com/edgelesssys/marblerun: upgrade to the fixed version with the command below.
go get github.com/edgelesssys/marblerun@v1.4.1Details
Encryption bypass in github.com/edgelesssys/marblerun
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/github.com/edgelesssys/marblerun
Introduced in:
0Fixed in: 1.4.1Fix
go get github.com/edgelesssys/marblerun@v1.4.1References
- https://github.com/edgelesssys/marblerun/security/advisories/GHSA-x5r5-2qrx-rqj8[ADVISORY]
- https://github.com/edgelesssys/marblerun/commit/0330ced092253613a07abe7b330ff6ac6fc6e9c6[FIX]
- https://github.com/edgelesssys/marblerun/commit/e5bcfe32883d22f3d87ffc9400f9fdb5ecbe3200[FIX]
- https://github.com/edgelesssys/marblerun/releases/tag/v1.4.1[WEB]