crossplane-contrib / crossplane-contrib/function-patch-and-transform
Security [High] CVE-2025-58188
- Lenguaje dominante
- Go
- Estrellas
- 46
- Forks
- 41
- Merge medio
- 1 d 10 h
- PR fusionados (30 d)
- 3
Descripción
Vulnerability Details
ID: https://www.cve.org/CVERecord?id=CVE-2025-58188
Severity: High
Type: go-module
Description: Validating certificate chains which contain DSA public keys can cause programs to panic, due to a interface cast that assumes they implement the Equal method. This affects programs which validate arbitrary certificate chains.
Fix State: fixed
Fix Versions: 1.25.2, 1.24.8
Artifact Paths: /function
More Info: https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI
Guía de contribución
No hay ninguna guía de contribución indexada para este repositorio
Línea de trabajo
No source file or test is named; start by inspecting the Go module metadata for the /function artifact and checking which dependency provides certificate validation. Confirm the module uses a fixed version, then run the repository’s available tests or vulnerability checks to verify the panic is addressed.
Escrito por el modelo de indexación a partir del texto del issue.
Evaluación
- Stack tecnológico
- go
- Área
- security
- Tipo de issue
- Error
- Dificultad
- 2/5
- Tiempo estimado
- 1-3 horas
- Estado de actividad
- Estancado
- Claridad
- Necesita aclaración
- Aptitud para principiantes
- 35/100