{"schema_version":"1.3.1","id":"GO-2026-4418","modified":"2026-02-05T03:20:45Z","published":"2026-02-05T03:20:45Z","aliases":["CVE-2023-43631","GHSA-3mq9-xhgq-r7gj"],"summary":"EVE: SSH as Root Unlockable Without Triggering Measured Boot in github.com/lf-edge/eve","details":"EVE: SSH as Root Unlockable Without Triggering Measured Boot in github.com/lf-edge/eve","affected":[{"package":{"name":"github.com/lf-edge/eve","ecosystem":"Go"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"0.0.0-20220708121648-5fef4d92e758"}]}],"ecosystem_specific":{}}],"references":[{"type":"ADVISORY","url":"https://github.com/lf-edge/eve/security/advisories/GHSA-3mq9-xhgq-r7gj"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-43631"},{"type":"FIX","url":"https://github.com/lf-edge/eve/commit/5fef4d92e75838cc78010edaed5247dfbdae1889"},{"type":"FIX","url":"https://github.com/lf-edge/eve/commit/aa3501d6c57206ced222c33aea15a9169d629141"},{"type":"WEB","url":"https://asrg.io/security-advisories/cve-2023-43631"},{"type":"WEB","url":"https://asrg.io/security-advisories/ssh-as-root-unlockable-without-triggering-measured-boot"}],"database_specific":{"url":"https://pkg.go.dev/vuln/GO-2026-4418","review_status":"UNREVIEWED"}}