Skip to content
OpenAdvisories

Package · Go

github.com/evervault/evervault-go

1 known vulnerabilities.

1 result · Clear filters · Feed

  • High 8.7

    Evervault Go SDK: Incomplete PCR Validation in Enclave Attestation for non-Evervault hosted Enclaves

    Evervault is a payment security solution. A vulnerability was identified in the `evervault-go` SDK’s attestation verification logic in versions of `evervault-go` prior to 1.3.2 that may allow incomplete documents to pass validation. This may cause the client …