| Package | Affected versions | Patched versions |
|---|---|---|
| github.com/nwaples/rardecode | ≤ 1.1.3all versions | |
| github.com/nwaples/rardecode/v2 | < 2.2.0 | 2.2.0 |
| rardecode | ≤ 2.1.1 |
rardecode versions <= 2.1.1 fail to restrict the dictionary size when reading large RAR dictionary sizes, which allows an attacker to provide a specially crafted RAR file and cause Denial of Service via an Out Of Memory Crash.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free