Skip to content
OpenAdvisories

Package · Alpine

go-ipfs

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 6.8
    CVE-2020-26283

    Control character injection in console output

    go-ipfs is an open-source golang implementation of IPFS which is a global, versioned, peer-to-peer filesystem. In go-ipfs before version 0.8.0, control characters are not escaped from console output. This can result in hiding input from the user which could r…

    ipfs go-ipfs github.com/ipfs/go-ipfs kubo Alpine Go
  • High 7.7
    CVE-2020-26279

    Path traversal

    go-ipfs is an open-source golang implementation of IPFS which is a global, versioned, peer-to-peer filesystem. In go-ipfs before version 0.8.0-rc1, it is possible for path traversal to occur with DAGs containing relative paths during retrieval. This can cause…

    ipfs go-ipfs github.com/ipfs/go-ipfs kubo Alpine Go