Go/github.com/cyphar/filepath-securejoin: unknown

Paths outside of the rootfs could be produced on Windows in github.com/cyphar/filepath-securejoin

Action: Upgrade github.com/cyphar/filepath-securejoin to 0.2.4 or later.

go get github.com/cyphar/filepath-securejoin@v0.2.4

Affected

Fixed versions

Sources

• osv: GO-2023-2048
• https://github.com/cyphar/filepath-securejoin/security/advisories/GHSA-6xv5-86q9-7xr8
• https://github.com/cyphar/filepath-securejoin/commit/c121231e1276e11049547bee5ce68d5a2cfe2d9b

published 2023-09-13T19:45:03Z · modified 2026-02-04T04:10:21.741884Z · JSON