All products

github.com/edgelesssys/marblerun

Go · Package
3 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
MarbleRun unauthenticated recovery allows Coordinator impersonationGHSA-W7WM-2425-7P2H · GO-2025-3450Version ranges need review. github.com/edgelesssys/marblerun Go High Fix reported
Go package github.com/edgelesssys/marblerun CLI commands susceptible to MITM attacksGHSA-J3RQ-4XJW-XG63 · GO-2023-2378Version ranges need review. github.com/edgelesssys/marblerun Go High Fix reported
Transparent TLS may not be applied to Marbles with certain manifest configurationsGHSA-X5R5-2QRX-RQJ8 · GO-2024-2583Version ranges need review. github.com/edgelesssys/marblerun Go Critical Fix reported