GO-2024-3015

See a problem?
Please try reporting it to the source first.

Source

https://pkg.go.dev/vuln/GO-2024-3015

Import Source

https://vuln.go.dev/ID/GO-2024-3015.json

JSON Data

https://api.test.osv.dev/v1/vulns/GO-2024-3015

Aliases

Published

2024-08-06T22:03:16Z

Modified

2024-08-06T22:27:55.228689Z

Summary

ZITADEL has improper HTML sanitization in emails and Console UI in github.com/zitadel/zitadel

Details

ZITADEL has improper HTML sanitization in emails and Console UI in github.com/zitadel/zitadel.

NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions.

(If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.)

The additional affected modules and versions are: github.com/zitadel/zitadel from v2.52.0 before v2.52.3, from v2.53.0 before v2.53.9, from v2.54.0 before v2.54.8, from v2.55.0 before v2.55.5, from v2.56.0 before v2.56.2, from v2.57.0 before v2.57.1, from v2.58.0 before v2.58.1.

Database specific

{
    "review_status": "UNREVIEWED",
    "url": "https://pkg.go.dev/vuln/GO-2024-3015"
}

References

Affected packages

Go / github.com/zitadel/zitadel

Package

Name: github.com/zitadel/zitadel; View open source insights on deps.dev
Purl: pkg:golang/github.com/zitadel/zitadel

Affected ranges

Type: SEMVER
Events: Introduced

0Unknown introduced version / All previous versions are affected

Ecosystem specific

{
    "custom_ranges": [
        {
            "events": [
                {
                    "introduced": "2.52.0"
                },
                {
                    "fixed": "2.52.3"
                },
                {
                    "introduced": "2.53.0"
                },
                {
                    "fixed": "2.53.9"
                },
                {
                    "introduced": "2.54.0"
                },
                {
                    "fixed": "2.54.8"
                },
                {
                    "introduced": "2.55.0"
                },
                {
                    "fixed": "2.55.5"
                },
                {
                    "introduced": "2.56.0"
                },
                {
                    "fixed": "2.56.2"
                },
                {
                    "introduced": "2.57.0"
                },
                {
                    "fixed": "2.57.1"
                },
                {
                    "introduced": "2.58.0"
                },
                {
                    "fixed": "2.58.1"
                }
            ],
            "type": "ECOSYSTEM"
        }
    ]
}