1 matches found
GO-2026-6166 WITHDRAWN: GSS authentication completes without mutual proof in github.com/lib/pq
This report has been withdrawn with reason: "False positive". github.com/lib/pq does not require a GSSAPI exchange to reach cryptographic completion before accepting AuthenticationOk and ReadyForQuery. After an unauthenticated peer requests GSS authentication, the driver sends its initial GSS tok...
5.4AI score
SaveExploits0References1
20