Vulnerability Report: GO-2020-0041

Affected Packages

• Path
  Go Versions
  Symbols
• github.com/unknwon/cae/tz
  before v1.0.1
  9 affected symbols

  • Create
  • ExtractTo
  • Open
  • OpenFile
  • TzArchive.Close
  • TzArchive.ExtractTo
  • TzArchive.ExtractToFunc
  • TzArchive.Flush
  • TzArchive.Open
• github.com/unknwon/cae/zip
  before v1.0.1
  10 affected symbols

  • Create
  • ExtractTo
  • ExtractToFunc
  • Open
  • OpenFile
  • ZipArchive.Close
  • ZipArchive.ExtractTo
  • ZipArchive.ExtractToFunc
  • ZipArchive.Flush
  • ZipArchive.Open

Aliases

• CVE-2020-7668
• GHSA-88jf-7rch-32qc

References

• https://github.com/unknwon/cae/commit/07971c00a1bfd9dc171c3ad0bfab5b67c2287e11
• https://snyk.io/research/zip-slip-vulnerability
• https://vuln.go.dev/ID/GO-2020-0041.json

Feedback