CVE-2024-55885

beego is an open-source web framework for the Go programming language. Versions of beego prior to 2.3.4 use MD5 as a hashing algorithm. MD5 is no longer considered secure against well-funded opponents due to its vulnerability to collision attacks. Version 2.3.4 replaces MD5 with SHA256...

CVE-2024-55885

CVE-2024-55885 affects Beego (Go). Beego versions prior to 2.3.4 use MD5 for hashing; MD5 is insecure against collisions. Beego 2.3.4 replaces MD5 with SHA256. Remediation: upgrade Beego to 2.3.4 or later to mitigate the issue. References indicate this is tied to Beego security advisories and com...