- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 8 · 1 critical, 7 high
- Registry
- pkg.go.dev
Advisories 8
- CVE-2023-43637High 7.8
Vault Key Partially Predetermined
Affected: fixed in 0.0.0-20220310190112-c0c966dc31e2.
- CVE-2023-43631High 8.8
SSH as Root Unlockable Without Triggering Measured Boot
Affected: fixed in 0.0.0-20220708121648-5fef4d92e758.
- CVE-2023-43632Critical 9.0
Freely Allocate Buffer on The Stack With Data From Socket
Affected: fixed in 0.0.0-20230519072751-977f42b07fa9.
- CVE-2023-43633High 8.8
Debug Functions Unlockable Without Triggering Measured Boot
Affected: fixed in 0.0.0-20220708121648-5fef4d92e758.
- CVE-2023-43634High 8.8
Config Partition Not Protected by Measured Boot
Affected: fixed in 0.0.0-20230519072751-977f42b07fa9.
- CVE-2023-43635High 8.8
Vault Key Sealed With SHA1 PCRs
Affected: fixed in 0.0.0-20230519072751-977f42b07fa9.
- CVE-2023-43636High 8.8
Rootfs Not Protected
Affected: fixed in 0.0.0-20220708121648-5fef4d92e758.
- CVE-2023-43630High 8.8
Config Partition Not Measured From 2 Fronts
Affected: fixed in 0.0.0-20230126065759-d9383a7ee4e1.