Go/github.com/hashicorp/go-slug CVE-2025-0377: high 7.5, EPSS 0.69%
HashiCorp go-slug Vulnerable to Zip Slip Attack
Action: Upgrade github.com/hashicorp/go-slug to 0.16.3 or later.
go get github.com/hashicorp/go-slug@v0.16.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.16.3 | - |
Fixed versions
| 0.16.3 |
Sources
- osv: GHSA-wpfp-cm49-9m9q
- https://nvd.nist.gov/vuln/detail/CVE-2025-0377
- https://discuss.hashicorp.com/t/hcsec-2025-01-hashicorp-go-slug-vulnerable-to-zip-slip-attack
CVE-2025-0377 · published · modified · JSON