aws / aws/aws-lambda-runtime-interface-emulator
CVEs found in latest RIE release
Open
invalid
- Dominant language
- Go
- Stars
- 1.1k
- Forks
- 118
- Avg merge
- 42m
- Merged PRs (30d)
- 2
Description
### CVEs found in latest RIE release
```
product version location cve_number cvss_vector
go 1.24.4 /usr/bin/go CVE-2024-3566 unknown
```
#### Are these resolved by building with the latest patch version of Go (go1.24.4)?:
> **No**
Contributor guide
Research direction
Start by tracing how the RIE release includes /usr/bin/go at version 1.24.4 and verify CVE-2024-3566 against that artifact. Confirm whether rebuilding with a patched Go version removes the finding, then document the result and update the relevant release or build configuration. Done means the reported CVE is resolved or its status is clearly recorded.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- go
- Domain
- security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 35/100