Go/github.com/ulikunitz/xz CVE-2021-29482: high 7.5, EPSS 1.44%
github.com/ulikunitz/xz fixes readUvarint Denial of Service (DoS)
Action: Upgrade github.com/ulikunitz/xz to 0.5.8 or later.
go get github.com/ulikunitz/xz@v0.5.8Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.5.8 | - |
Fixed versions
| 0.5.8 |
Sources
- osv: GHSA-25xm-hr59-7c27
- https://github.com/ulikunitz/xz/security/advisories/GHSA-25xm-hr59-7c27
- https://nvd.nist.gov/vuln/detail/CVE-2021-29482
- https://github.com/ulikunitz/xz/issues/35
- https://github.com/ulikunitz/xz/commit/69c6093c7b2397b923acf82cb378f55ab2652b9b
- https://pkg.go.dev/vuln/GO-2020-0016
CVE-2021-29482 · published · modified · JSON