Go/github.com/ulikunitz/xz CVE-2021-29482: unknown, EPSS 1.44%
Infinite loop in github.com/ulikunitz/xz
Action: Upgrade github.com/ulikunitz/xz to 0.5.8 or later.
go get github.com/ulikunitz/xz@v0.5.8Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.5.8 | - |
Fixed versions
| 0.5.8 |
Sources
- osv: GO-2020-0016
- https://github.com/ulikunitz/xz/commit/69c6093c7b2397b923acf82cb378f55ab2652b9b
- https://github.com/ulikunitz/xz/issues/35
CVE-2021-29482 · published · modified · JSON