~/products/github.com/proglottis_gpgme

pipeline liveDigest Docs

Github.Com Proglottis Gpgme vulnerabilities

1 known vulnerability affecting github.com/proglottis_gpgme.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1

Vulnerabilities

SortPage 1 of 1

CVE-2020-8945P3HIGH≥ 0, < 0.1.12021-05-18

CVE-2020-8945 [HIGH] CWE-416 GPGME Go wrapper contains Use After Free GPGME Go wrapper contains Use After Free The proglottis Go wrapper before 0.1.1 for the GPGME library has a use-after-free, as demonstrated by use for container image pulls by Docker or CRI-O. This leads to a crash or potential code execution during GPG signature verification.

Github.Com Proglottis Gpgme vulnerabilities | cvebase