Go/golang.org/x/image CVE-2023-29408: unknown, EPSS 0.93%

Excessive resource consumption in golang.org/x/image/tiff

Action: Upgrade golang.org/x/image to 0.10.0 or later.

go get golang.org/x/image@v0.10.0

Affected

Fixed versions

Sources

• osv: GO-2023-1989
• https://go.dev/issue/61582
• https://go.dev/cl/514897

CVE-2023-29408 · published 2023-08-02T15:06:02Z · modified 2024-05-20T16:03:47Z · JSON