Go/github.com/cloudflare/cfrpki CVE-2021-3907: unknown, EPSS 4.20%

Directory traversal in manifest path extraction in github.com/cloudflare/cfrpki

Action: Upgrade github.com/cloudflare/cfrpki to 1.4.4 or later.

go get github.com/cloudflare/cfrpki@v1.4.4

Affected

Fixed versions

Sources

• osv: GO-2022-0248
• https://github.com/cloudflare/cfrpki/commit/eb9cc4db7b7b79e44f56dfaa959fccdfb2af8284
• https://github.com/cloudflare/cfrpki/commit/a053a808feeb3115c76b6cc263ee55598ce6e8cd

CVE-2021-3907 · published 2022-07-15T23:07:18Z · modified 2026-02-04T03:00:30.292123Z · JSON