Go/github.com/fkie-cad/yapscan: unknown
Yapscan's report receiver server vulnerable to path traversal and log injection in github.com/fkie-cad/yapscan
Action: Upgrade github.com/fkie-cad/yapscan to 0.19.1 or later.
go get github.com/fkie-cad/yapscan@v0.19.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.18.0 | 0.19.1 | - |
Fixed versions
| 0.19.1 |
Sources
- osv: GO-2022-1204
- https://github.com/fkie-cad/yapscan/security/advisories/GHSA-9h6h-9g78-86f7
- https://github.com/fkie-cad/yapscan/commit/a75a20b50be673b96b1d42187b97f8cfe60728df
- https://github.com/fkie-cad/yapscan/commit/fef9a33ceb66f6b929839f7eaf393b629681bc5d
- https://github.com/fkie-cad/yapscan/issues/35
- https://github.com/fkie-cad/yapscan/releases/tag/v0.19.1
published · modified · JSON