github.com/bradleyfalzon/ghinstallation
View on Github
Activity
- Latest release
- 6y ago
- Total releases
- 7
- Cadence
- ~2 months
- Last 12 months
- 0
Reach
- Stars
- —
Details
- First release
- Jun 12, 2017
| Version | Released | |
|---|---|---|
v1.1.1
patch
1 CVE
CVE-2022-39304
GO-2022-1178
GHSA-h4q8-96p6-jcgr
Dec 22, 2022
JWT leak in github.com/bradleyfalzon/ghinstallation Errors returned by ghinstallation.Transport can include the JWT used for the failed operation. If the error is exposed to an untrusted party, this JWT could be extracted and used to authenticate further requests. Fixed in
1.1.2-0.20210308182858-d24f14f8be70
References
Updated May 20, 2024 · Source: OSV.dev |
v1.1.1
patch
Dependencies (3)
|
|
v1.1.0
minor
1 CVE
CVE-2022-39304
GO-2022-1178
GHSA-h4q8-96p6-jcgr
Dec 22, 2022
JWT leak in github.com/bradleyfalzon/ghinstallation Errors returned by ghinstallation.Transport can include the JWT used for the failed operation. If the error is exposed to an untrusted party, this JWT could be extracted and used to authenticate further requests. Fixed in
1.1.2-0.20210308182858-d24f14f8be70
References
Updated May 20, 2024 · Source: OSV.dev |
v1.1.0
minor
Dependencies (3)
|
|
v1.0.0
major
1 CVE
CVE-2022-39304
GO-2022-1178
GHSA-h4q8-96p6-jcgr
Dec 22, 2022
JWT leak in github.com/bradleyfalzon/ghinstallation Errors returned by ghinstallation.Transport can include the JWT used for the failed operation. If the error is exposed to an untrusted party, this JWT could be extracted and used to authenticate further requests. Fixed in
1.1.2-0.20210308182858-d24f14f8be70
References
Updated May 20, 2024 · Source: OSV.dev |
v1.0.0
major
Dependencies (3)
|
|
v0.1.3
patch
1 CVE
CVE-2022-39304
GO-2022-1178
GHSA-h4q8-96p6-jcgr
Dec 22, 2022
JWT leak in github.com/bradleyfalzon/ghinstallation Errors returned by ghinstallation.Transport can include the JWT used for the failed operation. If the error is exposed to an untrusted party, this JWT could be extracted and used to authenticate further requests. Fixed in
1.1.2-0.20210308182858-d24f14f8be70
References
Updated May 20, 2024 · Source: OSV.dev |
v0.1.3
patch
|
|
v0.1.2
patch
1 CVE
CVE-2022-39304
GO-2022-1178
GHSA-h4q8-96p6-jcgr
Dec 22, 2022
JWT leak in github.com/bradleyfalzon/ghinstallation Errors returned by ghinstallation.Transport can include the JWT used for the failed operation. If the error is exposed to an untrusted party, this JWT could be extracted and used to authenticate further requests. Fixed in
1.1.2-0.20210308182858-d24f14f8be70
References
Updated May 20, 2024 · Source: OSV.dev |
v0.1.2
patch
|
|
v0.1.1
patch
1 CVE
CVE-2022-39304
GO-2022-1178
GHSA-h4q8-96p6-jcgr
Dec 22, 2022
JWT leak in github.com/bradleyfalzon/ghinstallation Errors returned by ghinstallation.Transport can include the JWT used for the failed operation. If the error is exposed to an untrusted party, this JWT could be extracted and used to authenticate further requests. Fixed in
1.1.2-0.20210308182858-d24f14f8be70
References
Updated May 20, 2024 · Source: OSV.dev |
v0.1.1
patch
|
|
v0.1.0
initial
1 CVE
CVE-2022-39304
GO-2022-1178
GHSA-h4q8-96p6-jcgr
Dec 22, 2022
JWT leak in github.com/bradleyfalzon/ghinstallation Errors returned by ghinstallation.Transport can include the JWT used for the failed operation. If the error is exposed to an untrusted party, this JWT could be extracted and used to authenticate further requests. Fixed in
1.1.2-0.20210308182858-d24f14f8be70
References
Updated May 20, 2024 · Source: OSV.dev |
v0.1.0
initial
|