Skip to content
OpenAdvisories

Vendor

duke-git

2 known vulnerabilities.

Products

lancet 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.8
    CVE-2026-110240

    Lancet through 2.3.9 SSRF Protection Bypass via netutil.IsInternalIP

    Lancet through 2.3.9 contains an SSRF protection bypass vulnerability in netutil.IsInternalIP that misclassifies IPv6 private, link-local, CGNAT and transition addresses as external. Attackers can supply hostnames resolving to these address forms, including N…

    duke-git lancet
  • Medium 6.3
    CVE-2022-41920

    Zip slip in Lancet

    Lancet is a general utility library for the go programming language. Affected versions are subject to a ZipSlip issue when using the fileutil package to unzip files. This issue has been addressed and a fix will be included in versions 2.1.10 and 1.3.4. Users …

    duke-git lancet github.com/duke-git/lancet github.com/duke-git/lancet/v2 Go