Skip to content
OpenAdvisories

Product · micro

go-micro

1 known vulnerabilities.

1 result · Clear filters · Feed

  • High 7.4

    go-micro before 6.0.0 Disabled TLS Certificate Verification via tls.Config Helper

    go-micro before 6.0.0 contains an improper certificate validation vulnerability that allows network attackers to impersonate services because the shared TLS helper sets InsecureSkipVerify to true by default. Man-in-the-middle attackers can present any certifi…