DirectorySecurity Advisories
Sign In
Security Advisories

CGA-2c9v-p5v5-6ff2

Published

Last updated

https://images.chainguard.dev/security/CGA-2c9v-p5v5-6ff2
Package

croc

Latest Update
Fixed
Fixed Version

10.0.0-r0

Aliases
  • CVE-2023-43617
  • GHSA-hp56-xvf4-g6wr

Severity

5.3

Medium

CVSS V3

Summary

Cros secrets may be disclosed to untrusted relay

Description

An issue was discovered in Croc before 9.6.16. When a custom shared secret is used, the sender and receiver may divulge parts of this secret to an untrusted Relay, as part of composing a room name.

References

Updates


Safe Source for Open Sourceâ„¢
Media KitContact Us
© 2024 Chainguard. All Rights Reserved.
Private PolicyTerms of Use

Product

Chainguard Images