Go/github.com/yaklang/yaklang CVE-2023-40023: high 7.5, EPSS 1.05%
Yaklang Plugin's Fuzztag Component Allows Unauthorized Local File Reading
Action: Upgrade github.com/yaklang/yaklang to 1.2.4-sp2 or later.
go get github.com/yaklang/yaklang@v1.2.4-sp2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.2.4-sp2 | - |
Fixed versions
| 1.2.4-sp2 |
Sources
- osv: GHSA-xvhg-w6qc-m3qq
- https://github.com/yaklang/yaklang/security/advisories/GHSA-xvhg-w6qc-m3qq
- https://nvd.nist.gov/vuln/detail/CVE-2023-40023
- https://github.com/yaklang/yaklang/pull/295
- https://github.com/yaklang/yaklang/pull/296
- https://github.com/yaklang/yaklang
- https://mp.weixin.qq.com/s?__biz=Mzg5ODE3NTU1OQ==&mid=2247484236&idx=1&sn=ef0c14a89721800b2311d0e487388399
CVE-2023-40023 · published · modified · JSON