Skip to content
OpenAdvisories
High · 8.8 CVE-2022-0664 EUVD-2022-0871GHSA-6rrw-4fm9-rghvGO-2022-0561

Use of Hard-coded Cryptographic Key in gravitl/netmaker

Published Feb 18, 2022 · Updated Aug 2, 2024 · Assigned by @huntrdev

Vendor: gravitl Product: gravitl/netmaker Package: github.com/gravitl/netmaker Ecosystem: Go

Description

Use of Hard-coded Cryptographic Key in Go github.com/gravitl/netmaker prior to 0.8.5,0.9.4,0.10.0,0.10.1.

Affected products

VendorProductAffectedFixed
gravitl gravitl/netmaker unspecified – < 0.8.5,0.9.4,0.10.0,0.10.1 0.8.5,0.9.4,0.10.0,0.10.1

Affected packages

EcosystemPackageAffectedFixedRecord
Go github.com/gravitl/netmaker < 0.8.5 0.8.5 GHSA-6rrw-4fm9-rghv
Go github.com/gravitl/netmaker >= 0.9.0, < 0.9.4 0.9.4 GHSA-6rrw-4fm9-rghv
Go github.com/gravitl/netmaker < 0.8.5 · >= 0.9.0, < 0.9.4 0.8.5, 0.9.4 GO-2022-0561

References