github.com/jumpserver/koko vulnerabilities (Go)

2 vulnerabilities.

• github.com/jumpserver/koko Go SSH public key login without private key challenge if mfa is enabled in jumpserver CVE-2023-42818 Fix available 5.4 MediumSeptember 27, 2023
• github.com/jumpserver/koko Go Remote code execution on the host system via MongoDB shell in jumpserver CVE-2023-43651 Fix available 8.6 HighSeptember 27, 2023