Go/filippo.io/age: medium
age vulnerable to malicious plugin names, recipients, or identities causing arbitrary binary execution
Action: Upgrade filippo.io/age to 1.2.1 or later.
go get filippo.io/age@v1.2.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.2.1 | - |
Fixed versions
| 1.2.1 |
Sources
- osv: GHSA-32gq-x56h-299c
- https://github.com/FiloSottile/age/security/advisories/GHSA-32gq-x56h-299c
- https://github.com/str4d/rage/security/advisories/GHSA-4fg7-vxc8-qx5w
- https://github.com/FiloSottile/age/commit/482cf6fc9babd3ab06f6606762aac10447222201
- https://github.com/FiloSottile/age
published · modified · JSON