search

golang / vulndb

[mirror] The Go Vulnerability Database
Other
562 stars 61 forks source link

x/vulndb: potential Go vuln in github.com/gin-gonic/gin: GHSA-6vm3-jj99-7229 #1209

Closed GoVulnBot closed 1 year ago

GoVulnBot commented 1 year ago

In GitHub Security Advisory GHSA-6vm3-jj99-7229, there is a vulnerability in the following Go packages or modules:

Unit Fixed Vulnerable Ranges
github.com/gin-gonic/gin 1.6.0 < 1.6.0

Cross references:

See doc/triage.md for instructions on how to triage this report.

modules:
  - module: TODO
    versions:
      - fixed: 1.6.0
    packages:
      - package: github.com/gin-gonic/gin
description: Gin is a HTTP web framework written in Go (Golang). Unsanitized input
    in the default logger in github.com/gin-gonic/gin before v1.6.0 allows remote
    attackers to inject arbitrary log lines.
cves:
  - CVE-2020-36567
ghsas:
  - GHSA-6vm3-jj99-7229
neild commented 1 year ago

Duplicate of #1

gopherbot commented 1 year ago

Change https://go.dev/cl/460416 mentions this issue: data/reports: add GHSA to GO-2020-0001.yaml