Go/github.com/mvt-project/androidqf: unknown
androidqf: Zip entry Name Injection in APK bundle (Zip Slip for zip consumers) in github.com/mvt-project/androidqf
Action: Upgrade github.com/mvt-project/androidqf to 1.8.3 or later.
go get github.com/mvt-project/androidqf@v1.8.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.8.3 | - |
Fixed versions
| 1.8.3 |
Sources
- osv: GO-2026-5464
- https://github.com/mvt-project/androidqf/security/advisories/GHSA-jf2q-463c-6f52
- https://github.com/mvt-project/androidqf/releases/tag/v1.8.3
published · modified · JSON