https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T02:24:53.866804+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2021-33865 cnvd-2021-33865 2026-10-05T02:24:53.870916+00:00 cnvd-2021-33865 https://cve.radiocsirt.org/vuln/euvd-2026-46096 EUVD-2026-46096 2026-10-05T02:24:53.870970+00:00 EUVD-2026-46096 https://cve.radiocsirt.org/vuln/fkie_cve-2020-26283 fkie_cve-2020-26283 2026-10-05T02:24:53.870998+00:00

go-ipfs is an open-source golang implementation of IPFS which is a global, versioned, peer-to-peer filesystem. In go-ipfs before version 0.8.0, control characters are not escaped from console output. This can result in hiding input from the user which could result in the user taking an unknown, malicious action. This is fixed in version 0.8.0.

 https://cve.radiocsirt.org/vuln/ghsa-r4gv-vj59-cccm GHSA-r4gv-vj59-cccm — Control character injection in console output in github.com/ipfs/go-ipfs 2026-10-05T02:24:53.871047+00:00

Affected: Go: github.com/ipfs/go-ipfs

### Impact Control characters are not escaped from console output. This can result in hiding input from the user which could result in the user taking an unknown, malicious action.

### Patches <!-- _Has the problem been patched? What versions should users upgrade to?_ -->

- Patched via https://github.com/ipfs/go-ipfs/pull/7831 in v0.8.0

### For more information If you have any questions or comments about this advisory: * Open an issue in [go-ipfs](http://github.com/ipfs/go-ipfs) * Email us at [security@ipfs.io](mailto:security@ipfs.io)

 https://cve.radiocsirt.org/vuln/gsd-2020-26283 gsd-2020-26283 2026-10-05T02:24:53.871102+00:00 gsd-2020-26283