Skip to content
OpenAdvisories

Vendor

Go-Tribe

2 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 6.3

    Go-Tribe gotribe token.go Sign hard-coded credentials

    A vulnerability classified as critical has been found in Go-Tribe gotribe up to cd3ccd32cd77852c9ea73f986eaf8c301cfb6310. Affected is the function Sign of the file pkg/token/token.go. The manipulation of the argument config.key leads to hard-coded credentials…