Skip to content
OpenAdvisories

Package · Go

filippo.io/age

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Medium —
    GHSA-32gq-x56h-299c

    age vulnerable to malicious plugin names, recipients, or identities causing arbitrary binary execution

    A plugin name containing a path separator may allow an attacker to execute an arbitrary binary. Such a plugin name can be provided to the age CLI through an attacker-controlled recipient or identity string, or to the [`plugin.NewIdentity`](https://pkg.go.dev/…

    filippo.io/age Go