You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
See doc/triage.md for instructions on how to triage this report.
modules:
- module: TODO
versions:
- fixed: 0.2.0
packages:
- package: github.com/hashicorp/vault-ssh-helper/helper
- module: TODO
versions:
- fixed: 0.2.0
packages:
- package: github.com/hashicorp/vault-ssh-helper
description: HashiCorp vault-ssh-helper up to and including version 0.1.6 incorrectly
accepted Vault-issued SSH OTPs for the subnet in which a host's network interface
was located, rather than the specific IP address assigned to that interface. Fixed
in 0.2.0.
cves:
- CVE-2020-24359
ghsas:
- GHSA-f9fq-vjvh-779p
The text was updated successfully, but these errors were encountered:
In GitHub Security Advisory GHSA-f9fq-vjvh-779p, there is a vulnerability in the following Go packages or modules:
Cross references:
See doc/triage.md for instructions on how to triage this report.
The text was updated successfully, but these errors were encountered: