Skip to content
OpenAdvisories

Package · Go

github.com/netlify/gotrue

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium —
    GHSA-wpfr-6297-9v57

    User object created with invalid provider data in GoTrue

    ### Impact _What kind of vulnerability is it? Who is impacted?_ Under certain circumstances a valid user object would have been created with invalid provider metadata. This vulnerability affects everyone running an instance of GoTrue as a service. We advise y…

    github.com/netlify/gotrue Go
  • Critical —
    GHSA-433w-mm6h-rv9p

    Auth bypass in SAML provider

    ### Impact The following vulnerabilities have been disclosed, which impact users leveraging the SAML auth provider: - [`goxmldsig` - Signature Validation Bypass](https://github.com/russellhaering/goxmldsig/security/advisories/GHSA-q547-gmf8-8jr7) - [`gosaml2`…

    github.com/netlify/gotrue Go