tocsin

Go/github.com/mostynb/go-grpc-compression: unknown

go-grpc-compression has a zstd decompression bombing vulnerability in github.com/mostynb/go-grpc-compression

Action: Upgrade github.com/mostynb/go-grpc-compression to 1.2.3 or later.

go get github.com/mostynb/go-grpc-compression@v1.2.3

Affected

introducedfixedlast affected
1.1.41.2.3-

Fixed versions

1.2.3

Sources

published · modified · JSON