VDB
Sign up
—

GO-2024-3036

cortex establishes TLS connections with `InsecureSkipVerify` set to `true` in github.com/cortexproject/cortex

Details

cortex establishes TLS connections with `InsecureSkipVerify` set to `true` in github.com/cortexproject/cortex

Are you affected?

Enter the version of the package you're using.

Affected packages

Go/github.com/cortexlabs/cortex
Introduced in: 0

No fixed version published yet for github.com/cortexlabs/cortex (go modules). Pin to a known-safe version or switch to an alternative.

References