Vulnerable Go Dependency

Dummy app that depends on github.com/hashicorp/vault version v1.2.0 which has CVEs, including:

Authentication Bypass by Spoofing and Insufficient Verification of Data Authenticity in Hashicorp Vault (9.8 CRITICAL·GHSA-fp52-qw33-mfmw)
Incorrect Permission Assignment for Critical Resource in HashiCorp Vault (9.1 CRITICAL·GHSA-pfmw-vj74-ph8g)
Improper Resource Shutdown or Release in HashiCorp Vault (7.5 HIGH·GHSA-9vh5-r4qw-v3vv)

Name		Name	Last commit message	Last commit date
Latest commit History 7 Commits
.devcontainer		.devcontainer
.github		.github
.gitignore		.gitignore
README.md		README.md
go.mod		go.mod
go.sum		go.sum
main.go		main.go

Provide feedback