Go/filippo.io/age: unknown
Malicious plugin names, recipients, or identities causing arbitrary binary execution in filippo.io/age
Action: Upgrade filippo.io/age to 1.2.1 or later.
go get filippo.io/age@v1.2.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.2.1 | - |
Fixed versions
| 1.2.1 |
Sources
- osv: GO-2024-3344
- https://github.com/FiloSottile/age/security/advisories/GHSA-32gq-x56h-299c
- https://github.com/FiloSottile/age/commit/482cf6fc9babd3ab06f6606762aac10447222201
published · modified · JSON