Description
Goutil is a collection of miscellaneous functionality for the go language. In versions prior to 0.6.0 when users use fsutil.Unzip to unzip zip files from a malicious attacker, they may be vulnerable to path traversal. This vulnerability is known as a ZipSlip. This issue has been fixed in version 0.6.0, users are advised to upgrade. There are no known workarounds for this issue.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| gookit | goutil | < 0.6.0 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Go | github.com/gookit/goutil | < 0.6.0 | 0.6.0 | GHSA-fx2v-qfhr-4chv |
| Go | github.com/gookit/goutil | < 0.6.7 | 0.6.7 | GO-2023-1611 |