Skip to content
OpenAdvisories

Package · Go

github.com/ipld/go-car

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium —
    GHSA-9x4h-8wgm-8xfg

    Malformed CAR panics and excessive memory usage

    ### Impact **Versions impacted** * `<=` go-car@v0.3.3 * `<=` go-car@v2.3.0 **Description** Decoding CAR data from untrusted user input can cause: - Panics: - Out of bound memory access - Out of memory - Divide by zero - Excessive memory usage Such panics can …

    github.com/ipld/go-car/v2 github.com/ipld/go-car Go