PatchTheCVEgo-ipfs-dep vulnerabilities and fixes
Recent CVEs affecting go-ipfs-dep, with upgrade or downgrade steps. 1 tracked.
Also searched as: go ipfs dep.
go-ipfs-dep has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2018-05-31. Highest priority: CVE-2016-10563 (score 47/100).
- CVE-2016-10563 HIGH 8.1 UPGRADE During the installation process, the go-ipfs-deps module before 0.4.4 insecurely downloads resources over HTTP
FAQ
How do I fix go-ipfs-dep vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is go-ipfs-dep being exploited right now?
None of the tracked go-ipfs-dep CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which go-ipfs-dep CVE should I patch first?
CVE-2016-10563 currently ranks highest (47/100): During the installation process, the go-ipfs-deps module before 0.4.4 insecurely downloads resources over HTTP.