Skip to content
OpenAdvisories

Package · Go

github.com/blakesmith/ar

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Unscored —
    GO-2026-6905

    Panic on negative member size in Reader.Read in github.com/blakesmith/ar

    Reader.Next parses the 10-byte decimal size field of an archive member header with strconv.ParseInt without rejecting negative values. A header with a negative size leaves the reader with a negative remaining byte count, causing the subsequent call to Reader.…

    github.com/blakesmith/ar Go