Skip to content
OpenAdvisories

Package · Go

github.com/dablelv/go-huge-util

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2023-28105

    Go-huge-util vulnerable to path traversal when unzipping files

    go-used-util has commonly used utility functions for Go. Versions prior to 0.0.34 have a ZipSlip issue when using fsutil package to unzip files. When users use `zip.Unzip` to unzip zip files from a malicious attacker, they may be vulnerable to path traversal.…

    dablelv go-huge-util github.com/dablelv/go-huge-util Go