tocsin

CVE-2025-53633

2 advisories.

Go/github.com/ctfer-io/chall-manager CVE-2025-53633: high, EPSS 0.53%

Chall-Manager's scenario decoding process does not check for zip bombs

Action: Upgrade github.com/ctfer-io/chall-manager to 0.1.4 or later.

go get github.com/ctfer-io/chall-manager@v0.1.4

Affected

introducedfixedlast affected
00.1.4-

Fixed versions

0.1.4

Sources

CVE-2025-53633 · published · modified · JSON

Go/github.com/ctfer-io/chall-manager CVE-2025-53633: unknown, EPSS 0.53%

Chall-Manager's scenario decoding process does not check for zip bombs in github.com/ctfer-io/chall-manager

Action: Upgrade github.com/ctfer-io/chall-manager to 0.1.4 or later.

go get github.com/ctfer-io/chall-manager@v0.1.4

Affected

introducedfixedlast affected
00.1.4-

Fixed versions

0.1.4

Sources

CVE-2025-53633 · published · modified · JSON