VDB
GHSA-32gq-x56h-299c
GHSA-32gq-x56h-299c
PUBLISHED
age vulnerable to malicious plugin names, recipients, or identities causing arbitrary binary execution
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| chainguard | grafana-fips-11.2 | 0 |
| filippo.io | age | 0 |
| chainguard | flux-kustomize-controller | 0 |
| wolfi | flux-kustomize-controller | 0 |
| filippo.io | age | 0 |
| chainguard | sops-fips | 0 |
| wolfi | grafana-11.1 | 0 |
| chainguard | grafana-10.4 | 0 |
| chainguard | litestream | 0 |
| chainguard | sops | 0 |
| chainguard | age | 0 |
| chainguard | grafana-11.3 | 0 |
| chainguard | ksops | 0 |
| chainguard | grafana-fips-10.4 | 0 |
| chainguard | grafana-fips-11.3 | 0 |
| wolfi | grafana-11.4 | 0 |
| chainguard | flux-kustomize-controller-fips | 0 |
| wolfi | grafana-11.2 | 0 |
| chainguard | grafana-11.0 | 0, 0 |
| chainguard | grafana-11.2 | 0 |
…and 15 more
Timeline
- Dec 18, 2024 CVE Published
- Dec 20, 2024 CVE Updated
References
- https://github.com/advisories/GHSA-32gq-x56h-299c advisory
- https://github.com/FiloSottile/age/security/advisories/GHSA-32gq-x56h-299c url
- https://github.com/str4d/rage/security/advisories/GHSA-4fg7-vxc8-qx5w url
- https://github.com/FiloSottile/age/commit/482cf6fc9babd3ab06f6606762aac10447222201 patch
- https://github.com/FiloSottile/age url