| Package | Affected versions | Patched versions |
|---|---|---|
| github.com/duke-git/lancet | < 1.3.4 | 1.3.4 |
| github.com/duke-git/lancet/v2 | ≥ 2.0.0, < 2.1.10 | 2.1.10 |
| lancet | ≥ 2.0.0, < 2.1.10< 1.3.4 | 2.1.101.3.4 |
What kind of vulnerability is it? Who is impacted?
ZipSlip issue when use fileutil package to unzip files.
Has the problem been patched? What versions should users upgrade to?
It will fixed in v2.1.10, Please upgrade version to v2.1.10 or above. Users who use v1.x.x should upgrade v1.3.4 or above.
Is there a way for users to fix or remediate the vulnerability without upgrading?
No, users have to upgrade version.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free