VDB
GO-2023-2402
GO-2023-2402
PUBLISHED
Man-in-the-middle attacker can compromise integrity of secure channel in golang.org/x/crypto
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| wolfi | tkn | 0, 0, 0 |
| chainguard | crossplane-provider-azure-managedidentity | 0, 0, 0 |
| wolfi | wireguard-go | 0, 0, 0 |
| wolfi | gh | 0, 0, 0 |
| chainguard | kots | 0, 0, 0 |
| chainguard | nfs-subdir-external-provisioner-fips | 0, 0, 0 |
| wolfi | flux-helm-controller | 0, 0, 0 |
| wolfi | sigstore-scaffolding | 0, 0, 0 |
| wolfi | helm-4 | 0, 0, 0 |
| wolfi | up | 0, 0, 0 |
| wolfi | crossplane-provider-aws | 0, 0, 0 |
| wolfi | kube-state-metrics | 0, 0, 0 |
| chainguard | crossplane-provider-azure-sql | 0, 0, 0 |
| chainguard | src-fingerprint | 0, 0, 0 |
| wolfi | dockerize | 0, 0, 0 |
| wolfi | argo-workflows | 0, 0, 0 |
| wolfi | certificate-transparency | 0, 0, 0 |
| chainguard | boring-registry | 0, 0, 0 |
| chainguard | prometheus-postgres-exporter-fips | 0, 0, 0 |
| chainguard | amass | 0, 0, 0 |
…and 307 more
Timeline
- Dec 18, 2023 CVE Published
- Jul 7, 2026 CVE Updated