Low, CVSS 3.7GoPublished
gobase subject to Incorrect routing of some HTTP requests when using httpauth due to a race condition
CVE-2022-2583 · GHSA-h2x7-2ff6-v32p
- Affected
- Go github.com/ntbosscher/gobase < 0.7.2
- Fixed in
- 0.7.2· Vendor fix available
- Issue
- Impact Incorrect routing of some HTTP requests when using httpauth due to a race condition Patches Upgrade to version 0.7.2 for fix Workarounds None For more information If you have any questions or comments about this advisory: Email us at nbosscher@blue-giraffe.ca
Recommended action: Upgrade to 0.7.2 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.