| Package | Affected versions | Patched versions |
|---|---|---|
| stdlib | ≥ 1.26.0-0, < 1.26.5≥ 1.27.0-0, < 1.27.0-rc.2< 1.25.12 | 1.26.51.27.0-rc.21.25.12 |
| go | = 1.27≥ 1.24.0, < 1.25.12≥ 1.26.0, < 1.26.5 | 1.25.121.26.5 |
On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when the final path component of the a path is a symbolic link and the path ends in /.
For example, 'root.Open("symlink/")' will open "symlink" even when "symlink" is a symbolic link pointing outside of the root.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free