| Package | Affected versions | Patched versions |
|---|---|---|
| github.com/ulikunitz/xz | < 0.5.8 | 0.5.8 |
| stdlib | ≥ 1.14.0-0, < 1.14.7< 1.13.15 | 1.14.71.13.15 |
| go | ≥ 1.14, < 1.14.7< 1.13.15 | 1.14.71.13.15 |
This advisory has been withdrawn because alerts cannot be issued for the Go standard library at this time.
Go before 1.13.15 and 14.x before 1.14.7 can have an infinite read loop in ReadUvarint and ReadVarint in encoding/binary via invalid inputs.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free