Affected by GO-2024-2442 and 3 other vulnerabilities

GO-2024-2442: Withdrawn Advisory: Teleport Access List owners can escalate their privileges in github.com/gravitational/teleport

GO-2024-2445: Withdrawn Advisory: SFTP is possible on the Proxy server for any user with SFTP access in github.com/gravitational/teleport

GO-2024-2447: Withdrawn Advisory: Teleport Proxy and Teleport Agents: SSRF to arbitrary hosts is possible from low privileged users in github.com/gravitational/teleport

GO-2024-2449: Withdrawn Advisory: User-provided environment values allow execution on macOS agents in github.com/gravitational/teleport

lib/

Details

Valid go.mod file

The Go module system was introduced in Go 1.11 and is the official dependency management solution for Go.
Redistributable license

Redistributable licenses place minimal restrictions on how software can be used, modified, and redistributed.
Tagged version

Modules with tagged versions give importers more predictable builds.
Stable version

When a project reaches major version v1 it is considered stable.
Learn more about best practices

Repository

github.com/gravitational/teleport

Directories ¶

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL

Path	Synopsis
auth
native
test
testauthority
backend Package backend represents interface for accessing local or remote storage Copyright 2015 Gravitational, Inc.	Package backend represents interface for accessing local or remote storage Copyright 2015 Gravitational, Inc.
boltbk Package boltbk implements BoltDB backed backend for standalone instances and test mode, you should use Etcd in production Copyright 2015 Gravitational, Inc.	Package boltbk implements BoltDB backed backend for standalone instances and test mode, you should use Etcd in production Copyright 2015 Gravitational, Inc.
etcdbk Package etcdbk implements Etcd powered backend	Package etcdbk implements Etcd powered backend
test Package test contains a backend acceptance test suite that is backend implementation independant each backend will use the suite to test itself	Package test contains a backend acceptance test suite that is backend implementation independant each backend will use the suite to test itself
client
config
defaults Package defaults contains default constants set in various parts of teleport codebase	Package defaults contains default constants set in various parts of teleport codebase
events Package events contains structured events emitted by various parts of teleport, they are collected by auth server for audit purposes Package events implements stored event log used for audit and other purposes	Package events contains structured events emitted by various parts of teleport, they are collected by auth server for audit purposes Package events implements stored event log used for audit and other purposes
boltlog
test Package test contains a log backend acceptance test suite that is implementation independant each backend will use the suite to test itself	Package test contains a log backend acceptance test suite that is implementation independant each backend will use the suite to test itself
httplib Package httplib implements common utility functions for writing classic HTTP handlers	Package httplib implements common utility functions for writing classic HTTP handlers
limiter Package limiter implements connection and rate limiters for teleport	Package limiter implements connection and rate limiters for teleport
recorder Package recorder implements session recorder - it captures all the output that can be later replayed in terminals	Package recorder implements session recorder - it captures all the output that can be later replayed in terminals
boltrec
test
reversetunnel Package reversetunnel sets up persistent reverse tunnel between remote site and teleport proxy, when site agents dial to teleport proxy's socket and teleport proxy can connect to any server through this tunnel.	Package reversetunnel sets up persistent reverse tunnel between remote site and teleport proxy, when site agents dial to teleport proxy's socket and teleport proxy can connect to any server through this tunnel.
service Package service implements teleport running service, takes care of initialization, cleanup and shutdown procedures Copyright 2015 Gravitational, Inc.	Package service implements teleport running service, takes care of initialization, cleanup and shutdown procedures Copyright 2015 Gravitational, Inc.
services Package services implements statefule services provided by teleport, like certificate authority management, user and web sessions, events and logs Copyright 2015 Gravitational, Inc.	Package services implements statefule services provided by teleport, like certificate authority management, user and web sessions, events and logs Copyright 2015 Gravitational, Inc.
suite
session Package session is used for bookeeping of SSH interactive sessions that happen in realtime across the teleport cluster	Package session is used for bookeeping of SSH interactive sessions that happen in realtime across the teleport cluster
srv
sshutils
scp
teleagent
utils
web Package web implements web proxy handler that provides web interface to view and connect to teleport nodes	Package web implements web proxy handler that provides web interface to view and connect to teleport nodes