[Bug 1234550] VUL-0: CVE-2024-45337: gokart: golang.org/x/crypto/ssh: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto

https://bugzilla.suse.com/show_bug.cgi?id=1234550 https://bugzilla.suse.com/show_bug.cgi?id=1234550#c4 --- Comment #4 from Jeff Kowalczyk <jkowalczyk@suse.com> --- Created attachment 879223 --> https://bugzilla.suse.com/attachment.cgi?id=879223&action=edit govulncheck CVE report against gokart v0.5.1 as of 2024-12-17 Attaching a govulncheck report against gokart v0.5.1 as of 2024-12-17 as a demonstration its utility to security teams for assessing CVE applicability. The gokart application is being dropped from repositories due to upstream EOL status and the accumulation of the vulnerabilities cited in the report. -- You are receiving this mail because: You are on the CC list for the bug.