| Package | Affected versions | Patched versions |
|---|---|---|
| github.com/foxcpp/maddy | ≥ 0.5.0, < 0.5.2 | 0.5.2 |
This vulnerability affects maddy 0.5.1, 0.5.0 users using auth.shadow module and an extremely outdated system that still allows MD5 hashes in /etc/shadows.
Patch is available as part of the 0.5.2 release.
Ensure MD5 hashes are not present in /etc/shadow.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free