tocsin

Alpine/go: medium 6.5

archive/zip uses a super-linear file name indexing algorithm that is invoked the first time a file in an archive is opened. This can lead to a denial of service when consuming a maliciously constructe

Action: Upgrade go to 1.24.12-r0 or later.

Affected

introducedfixedlast affected
1.25.0--

Fixed versions

1.24.12-r0

Sources

published · modified · JSON