Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/golang-github-proglottis-gpgme@0.0~git20181127.3b0be09-2
purl pkg:deb/debian/golang-github-proglottis-gpgme@0.0~git20181127.3b0be09-2
Next non-vulnerable version 0.1.1-1
Latest non-vulnerable version 0.1.1-1
Risk 4.0
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-vfxz-vfmr-w3d1
Aliases:
CVE-2020-8945
GHSA-m6wg-2mwg-4rfq
GPGME Go wrapper contains Use After Free The proglottis Go wrapper before 0.1.1 for the GPGME library has a use-after-free, as demonstrated by use for container image pulls by Docker or CRI-O. This leads to a crash or potential code execution during GPG signature verification.
0.1.1-1
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-15T22:17:28.481647+00:00 Debian Oval Importer Affected by VCID-vfxz-vfmr-w3d1 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-11T21:55:01.768899+00:00 Debian Oval Importer Affected by VCID-vfxz-vfmr-w3d1 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-08T21:32:22.927735+00:00 Debian Oval Importer Affected by VCID-vfxz-vfmr-w3d1 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0