github.com/edgexfoundry/app-functions-sdk-go vulnerabilities (Go)

2 vulnerabilities.

• github.com/edgexfoundry/app-functions-sdk-go Go Configuration API in EdgeXFoundry exposes message bus credentials to local unauthenticated users CVE-2022-31066 Fix available 5.9 MediumJune 14, 2022
• github.com/edgexfoundry/app-functions-sdk-go Go Broken encryption in app-functions-sdk “AES” transform in EdgeX Foundry releases prior to Jakarta allows attackers to decrypt messages via unspecified vectors CVE-2021-41278 Public exploitFix available 5.4 MediumNovember 18, 2021