| Package | Affected versions | Patched versions |
|---|---|---|
| stdlib | ≥ 1.16.0-0, < 1.16.1 | 1.16.1 |
| go | ≥ 1.16.0, < 1.16.1 | 1.16.1 |
Using Reader.Open on an archive containing a file with a path prefixed by "../" will cause a panic due to a stack overflow. If parsing user supplied archives, this may be used as a denial of service vector.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free