Go/github.com/lf-edge/ekuiper/v2: critical
LF Edge eKuiper is vulnerable to Arbitrary File Read/Write via unsanitized names and zip extraction
Action: Upgrade github.com/lf-edge/ekuiper/v2 to 2.3.0 or later.
go get github.com/lf-edge/ekuiper/v2@v2.3.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.3.0 | - |
Fixed versions
| 2.3.0 |
Sources
- osv: GHSA-rj4j-2jph-gg43
- https://github.com/lf-edge/ekuiper/security/advisories/GHSA-rj4j-2jph-gg43
- https://github.com/lf-edge/ekuiper/pull/3911
- https://github.com/lf-edge/ekuiper/commit/58362b089c76f08c400fe0dbb3667e6e871eaffd
- https://github.com/lf-edge/ekuiper
published · modified · JSON