[GH-ISSUE #57] Go library CVE's CVE-2024-45337⁠ CVE-2023-45288⁠ #30

Closed
opened 2026-10-13 21:02:33 +00:00 by bsakaguchi · 1 comment
Owner

Originally created by @DaanSelen on GitHub (Dec 12, 2024).
Original GitHub issue: https://github.com/amnezia-vpn/amneziawg-go/issues/57

golang.org/x/crypto 0.21.0 contains: CVE-2024-45337
Fix: 0.31.0
github.com/amnezia-vpn/amneziawg-go@2e3f7d122c/go.mod (L7C2-L7C29)

golang.org/x/net 0.2.1 contains: CVE-2023-45288⁠
Fix 0.23.0
github.com/amnezia-vpn/amneziawg-go@2e3f7d122c/go.mod (L8)

Is there going to be a bump?

Originally created by @DaanSelen on GitHub (Dec 12, 2024). Original GitHub issue: https://github.com/amnezia-vpn/amneziawg-go/issues/57 golang.org/x/crypto 0.21.0 contains: CVE-2024-45337 Fix: 0.31.0 https://github.com/amnezia-vpn/amneziawg-go/blob/2e3f7d122ca8ef61e403fddc48a9db8fccd95dbf/go.mod#L7C2-L7C29 golang.org/x/net 0.2.1 contains: CVE-2023-45288⁠ Fix 0.23.0 https://github.com/amnezia-vpn/amneziawg-go/blob/2e3f7d122ca8ef61e403fddc48a9db8fccd95dbf/go.mod#L8 Is there going to be a bump?
Author
Owner

@DaanSelen commented on GitHub (Nov 26, 2025):

Library has been updated.

<!-- gh-comment-id:3581153847 --> @DaanSelen commented on GitHub (Nov 26, 2025): Library has been updated.
Sign in to join this conversation.
No labels
pull-request
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
amnezia-vpn/amneziawg-go#30
No description provided.