High, CVSS 7.5GoPublished
goproxy Denial of Service vulnerability
CVE-2023-37788 · GHSA-4r8x-2p26-976p
- Affected
- Go github.com/elazarl/goproxy < 0.0.0-20230731152917-f99041a5c027
- Fixed in
- 0.0.0-20230731152917-f99041a5c027· Vendor fix available
- Issue
- goproxy prior to pseudoversion 0.0.0-20230731152917-f99041a5c027 was discovered to contain an issue which can lead to a Denial of service (DoS) via unspecified vectors.
Recommended action: Upgrade to 0.0.0-20230731152917-f99041a5c027 (pre-release) or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.