GHSA-433w-mm6h-rv9p

Source

https://github.com/advisories/GHSA-433w-mm6h-rv9p

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2021/06/GHSA-433w-mm6h-rv9p/GHSA-433w-mm6h-rv9p.json

JSON Data

https://api.osv.dev/v1/vulns/GHSA-433w-mm6h-rv9p

Published

2021-06-23T17:29:06Z

Modified

2021-05-21T20:47:30Z

Summary

Auth bypass in SAML provider

Details

Impact

The following vulnerabilities have been disclosed, which impact users leveraging the SAML auth provider:

Patches

Patch available

Please upgrade to v1.0.0 or commit hash a2b4dd6bc4ef7562d1df044098b303f564eefa90

Workarounds

No known workarounds.

For more information

If you have any questions or comments about this advisory:

Open an issue in gotrue
Email us at security@netlify.com

Database specific

{
    "cwe_ids":  [],
    "github_reviewed":  true,
    "github_reviewed_at":  "2021-05-21T20:47:30Z",
    "nvd_published_at":  null,
    "severity":  "CRITICAL"
}

References

https://github.com/netlify/gotrue/security/advisories/GHSA-433w-mm6h-rv9p

Affected packages

Go / github.com/netlify/gotrue

Package

Name: github.com/netlify/gotrue; View open source insights on deps.dev
Purl: pkg:golang/github.com/netlify/gotrue

Affected ranges

Type: SEMVER
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.0.0

Database specific

source

"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2021/06/GHSA-433w-mm6h-rv9p/GHSA-433w-mm6h-rv9p.json"