GHSA-5r5w-h76p-m726

Use of a Broken or Risky Cryptographic Algorithm in Max Mazurov Maddy

Source: GitHub Advisory Database (reviewed) High CVE-2021-42583

Packages

Ecosystem	Package	Affected	Fixed in
Go	github.com/foxcpp/maddy	< 0.5.2	0.5.2

Details

As written in the advisory (Markdown source, shown as plain text).

A Broken or Risky Cryptographic Algorithm exists in Max Mazurov Maddy before 0.5.2, which is an unnecessary risk that may result in the exposure of sensitive information.

References

External links from the advisory. They lead to third-party sites.

https://nvd.nist.gov/vuln/detail/CVE-2021-42583 advisory
https://github.com/foxcpp/maddy package
https://github.com/foxcpp/maddy/blob/df40dce1284cd0fd0a9e8e7894029553d653d0a5/internal/auth/shadow/verify.go web
https://github.com/foxcpp/maddy/releases/tag/v0.5.2 web