Skip to content
OpenAdvisories

Package · Go

github.com/moov-io/customers

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Low —
    GHSA-g636-q5fc-4pr7

    accounts: Hash account number using Salt

    @alovak found that currently when we build hash of account number we do not "salt" it. Which makes it vulnerable to rainbow table attack. **What did you expect to see?** I expected salt (some random number from configuration) to be used in [hash.AccountNumber…

    github.com/moov-io/customers Go