| Package | Affected versions | Patched versions |
|---|---|---|
| github.com/Azure/go-ntlmssp | < 0.1.1 | 0.1.1 |
| go-ntlmssp | < 0.1.1 | 0.1.1 |
go-ntlmssp is a Go package that provides NTLM/Negotiate authentication over HTTP. Prior to version 0.1.1, a malicious NTLM challenge message can causes an slice out of bounds panic, which can crash any Go process using ntlmssp.Negotiator as an HTTP transport. Version 0.1.1 patches the issue.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free