Go/github.com/goreleaser/nfpm/v2 CVE-2023-32698: unknown, EPSS 0.38%

Incorrect permissions in github.com/goreleaser/nfpm/v2

Action: Upgrade github.com/goreleaser/nfpm/v2 to 2.29.0 or later.

go get github.com/goreleaser/nfpm/v2@v2.29.0

Affected

Fixed versions

Sources

• osv: GO-2023-1788
• https://github.com/goreleaser/nfpm/commit/ed9abdf63d5012cc884f2a83b4ab2b42b3680d30
• https://github.com/goreleaser/nfpm/releases/tag/v2.29.0
• https://github.com/advisories/GHSA-w7jw-q4fg-qc4c

CVE-2023-32698 · published 2023-06-01T21:27:40Z · modified 2026-08-07T08:12:03.669873882Z · JSON