Skip to content
OpenAdvisories

Package · Go

github.com/ginuerzh/gost

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Critical 9.8
    CVE-2024-39223

    Missing key verification in gost

    An authentication bypass in the SSH service of gost v2.11.5 allows attackers to intercept communications via setting the HostKeyCallback function to ssh.InsecureIgnoreHostKey

    github.com/ginuerzh/gost gost Ubuntu Go
  • Medium 5.9
    CVE-2023-32691

    ginuerzh/gost vulnerable to Timing Attack

    gost (GO Simple Tunnel) is a simple tunnel written in golang. Sensitive secrets such as passwords, token and API keys should be compared only using a constant-time comparison function. Untrusted input, sourced from a HTTP header, is compared directly with a s…

    ginuerzh gost github.com/ginuerzh/gost Go