Package · Alpine

croc

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

High 7.8

CVE-2023-43619

Croc sender may send dangerous new files to receiver

An issue was discovered in Croc through 9.6.5. A sender may send dangerous new files to a receiver, such as executable content or a .ssh/authorized_keys file.

github.com/schollz/croc github.com/schollz/croc/v8 github.com/schollz/croc/v9 github.com/schollz/croc/v6 Alpine Go

Sep 20, 2023
High 7.8

CVE-2023-43620

Croc sender may place ANSI or CSI escape sequences in filename to attach receiver's terminal device

An issue was discovered in Croc through 9.6.5. A sender may place ANSI or CSI escape sequences in a filename to attack the terminal device of a receiver.

github.com/schollz/croc github.com/schollz/croc/v8 github.com/schollz/croc/v9 github.com/schollz/croc/v6 Alpine Go

Sep 20, 2023