Skip to content

Commit 1ba225d

Browse files
tatianabTatiana Bradley
authored andcommitted
data/reports: add alias for GO-2020-0047.yaml
Aliases: CVE-2020-36563, GHSA-5rhg-xhgr-5hfj Updates #47 Fixes #1231 Change-Id: Ie0cb5b058a7a2aae723bbd73e616919781cb3b02 Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/461443 TryBot-Result: Gopher Robot <gobot@golang.org> Reviewed-by: Damien Neil <dneil@google.com> Reviewed-by: Tatiana Bradley <tatiana@golang.org> Run-TryBot: Tatiana Bradley <tatiana@golang.org> Auto-Submit: Tatiana Bradley <tatiana@golang.org>
1 parent 762d59a commit 1ba225d

File tree

2 files changed

+4
-1
lines changed

2 files changed

+4
-1
lines changed

data/osv/GO-2020-0047.json

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,8 @@
33
"published": "2021-04-14T20:04:52Z",
44
"modified": "0001-01-01T00:00:00Z",
55
"aliases": [
6-
"CVE-2020-36563"
6+
"CVE-2020-36563",
7+
"GHSA-5rhg-xhgr-5hfj"
78
],
89
"details": "XML Digital Signatures generated and validated using this package use SHA-1, which may allow an attacker to craft inputs which cause hash collisions depending on their control over the input.",
910
"affected": [

data/reports/GO-2020-0047.yaml

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -11,6 +11,8 @@ description: |
1111
SHA-1, which may allow an attacker to craft inputs which cause hash
1212
collisions depending on their control over the input.
1313
published: 2021-04-14T20:04:52Z
14+
ghsas:
15+
- GHSA-5rhg-xhgr-5hfj
1416
references:
1517
- web: https://github.com/RobotsAndPencils/go-saml/pull/38
1618
cve_metadata:

0 commit comments

Comments
 (0)