Skip to content
OpenAdvisories

Package · Go

mellium.im/sasl

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 9.8
    CVE-2022-48195

    mellium.im/sasl authentication failure due to insufficient nonce randomness

    An issue was discovered in Mellium mellium.im/sasl before 0.3.1. When performing SCRAM-based SASL authentication, if the remote end advertises support for channel binding, no random nonce is generated (instead, the nonce is empty). This causes authentication …

    mellium.im/sasl Go