Affected by GO-2022-1029 and 4 other vulnerabilities

GO-2022-1029: HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul

GO-2023-1827: Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

GO-2024-3241: Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in github.com/hashicorp/consul

GO-2024-3242: Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

GO-2024-3243: Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul

internal/

Details

Valid go.mod file

The Go module system was introduced in Go 1.11 and is the official dependency management solution for Go.
Redistributable license

Redistributable licenses place minimal restrictions on how software can be used, modified, and redistributed.
Tagged version

Modules with tagged versions give importers more predictable builds.
Stable version

When a project reaches major version v1 it is considered stable.
Learn more about best practices

Path	Synopsis
go-sso
oidcauth package oidcauth bundles up an opinionated approach to authentication using both the OIDC authorization code workflow and simple JWT decoding (via static keys, JWKS, and OIDC discovery).	package oidcauth bundles up an opinionated approach to authentication using both the OIDC authorization code workflow and simple JWT decoding (via static keys, JWKS, and OIDC discovery).
oidcauth/internal/strutil
oidcauth/oidcauthtest package oidcauthtest exposes tools to assist in writing unit tests of OIDC and JWT authentication workflows.	package oidcauthtest exposes tools to assist in writing unit tests of OIDC and JWT authentication workflows.
iamauth
iamauthtest
responses
responsestest
testing
golden
tools
proto-gen-rpc-glue Module
proto-gen-rpc-glue/e2e/consul Module
protoc-gen-consul-rate-limit Module