Skip to content

litestream v0.3.13 CVE-2024-41254/GHSA-qpgw-j75c-j585 #602

@jamie-albert

Description

@jamie-albert

An issue was discovered in litestream v0.3.13. The usage of the ssh.InsecureIgnoreHostKey() disables host key verification, possibly allowing attackers to obtain sensitive information via a man-in-the-middle attack. GHSA-qpgw-j75c-j585

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions