CLEANSTART-2025-CS89495 Security fix for ghsa-32gq-x56h-299c applied in: litestream 0.5.2-r0, litestream 0.5.2-r1

ghsa-32gq-x56h-299c affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

GO-2024-3344 vulnerabilities

Vulnerabilities for packages: chezmoi, ksops, age-fips, grafana-fips, sops, litestream, sops-fips, age, flux-kustomize-controller-fips, grafana, flux-kustomize-controller...

GO-2024-3344 vulnerabilities

Vulnerabilities for packages: flux-kustomize-controller, litestream, sops, age, ksops, chezmoi...

CLEANSTART-2026-LY65010 Security fixes in litestream 0.5.14-r2

Package litestream version 0.5.14-r2 fixes 3 vulnerabilities: ghsa-78h2-9frx-2jm8, CVE-2026-34986, ghsa-xmrv-pmrh-hhx2...

CLEANSTART-2026-OI22406 Security fixes in litestream 0.3.14-r3

Package litestream version 0.3.14-r3 fixes 3 vulnerabilities: ghsa-5cgq-3rg8-m6cv, ghsa-v778-237x-gjrc, ghsa-hcg3-q754-cr77...

PT-2026-85980

Package litestream version 0.3.14-r3 fixes 3 vulnerabilities: ghsa-5cgq-3rg8-m6cv, ghsa-v778-237x-gjrc, ghsa-hcg3-q754-cr77...

CLEANSTART-2026-IC45702 Security fixes in litestream 0.5.2-r0

Package litestream version 0.5.2-r0 fixes 3 vulnerabilities: ghsa-8r3f-844c-mc37, ghsa-6v2p-p543-phr9, ghsa-32gq-x56h-299c...

PT-2026-85909

Package litestream version 0.5.2-r0 fixes 3 vulnerabilities: ghsa-8r3f-844c-mc37, ghsa-6v2p-p543-phr9, ghsa-32gq-x56h-299c...

CVE-2024-41254 vulnerabilities

Vulnerabilities for packages: litestream...

GHSA-QPGW-J75C-J585 vulnerabilities

Vulnerabilities for packages: litestream...

GHSA-QPGW-J75C-J585 vulnerabilities

Vulnerabilities for packages: litestream...

CVE-2024-41254 vulnerabilities

Vulnerabilities for packages: litestream...

CVE-2024-41254

An issue was discovered in litestream v0.3.13. The usage of the ssh.InsecureIgnoreHostKey disables host key verification, possibly allowing attackers to obtain sensitive information via a man-in-the-middle attack...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: fluent-bit-plugin-loki, flux-kustomize-controller, postgres-operator, sbomqs, flux-source-controller, regclient, frp, gostatsd, temporal-server, memcached-exporter, velero-plugin-for-aws, amazon-k8s-cni, tflint, oras, argo-workflows, certificate-transparency,...

GHSA-32GQ-X56H-299C vulnerabilities

Vulnerabilities for packages: chezmoi, ksops, age-fips, grafana-fips, sops, litestream, sops-fips, age, flux-kustomize-controller-fips, grafana, flux-kustomize-controller...

Man-in-the-middle Attack

github.com/benbjohnson/litestream is vulnerable to a Man-in-the-middle Attack. The vulnerability is due to unsafe usage of ssh.InsecureIgnoreHostKey, which disables host key verification and potentially allows attackers to obtain sensitive information through a Man-in-the-middle Attack...

CVE-2024-41254

An issue was discovered in litestream v0.3.13. The usage of the ssh.InsecureIgnoreHostKey disables host key verification, possibly allowing attackers to obtain sensitive information via a man-in-the-middle attack...

CVE-2024-41254

An issue was discovered in litestream v0.3.13. The usage of the ssh.InsecureIgnoreHostKey disables host key verification, possibly allowing attackers to obtain sensitive information via a man-in-the-middle attack...

CVE-2024-41254

An issue was discovered in litestream v0.3.13. The usage of the ssh.InsecureIgnoreHostKey disables host key verification, possibly allowing attackers to obtain sensitive information via a man-in-the-middle attack...

CVE-2024-41254: Improper Verification of Cryptographic Signature

An issue was discovered in litestream v0.3.13. The usage of the ssh.InsecureIgnoreHostKey disables host key verification, possibly allowing attackers to obtain sensitive information via a man-in-the-middle attack...