Go/go.rgst.io/stencil/v2: medium
go.rgst.io/stencil/v2 vulnerable to Path Traversal
Action: Upgrade go.rgst.io/stencil/v2 to 2.3.0 or later.
go get go.rgst.io/stencil/v2@v2.3.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.3.0 | - |
Fixed versions
| 2.3.0 |
Sources
- osv: GHSA-p799-q2pr-6mxj
- https://github.com/jaredallard/archives/security/advisories/GHSA-j95m-rcjp-q69h
- https://github.com/rgst-io/stencil/security/advisories/GHSA-p799-q2pr-6mxj
- https://github.com/rgst-io/stencil/pull/255
- https://github.com/rgst-io/stencil/commit/5482fcada0c6f77d903d13129bd656b7df80ac3a
- https://github.com/rgst-io/stencil
published · modified · JSON