CVE-2024-45340

Source
https://cve.org/CVERecord?id=CVE-2024-45340
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-45340.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-45340
Aliases
Downstream
Related
Published
2025-01-28T02:15:29Z
Modified
2026-02-04T03:09:58.412171Z
Summary
[none]
Details

Credentials provided via the new GOAUTH feature were not being properly segmented by domain, allowing a malicious server to request credentials they should not have access to. By default, unless otherwise set, this only affected credentials stored in the users .netrc file.

References

Affected packages