Most recent entries from all

EUVD-2026-218862

2026-10-26T02:35:10.414736+00:00

EUVD-2026-218862

fkie_cve-2023-28105

2026-10-26T02:35:10.414767+00:00

go-used-util has commonly used utility functions for Go. Versions prior to 0.0.34 have a ZipSlip issue when using fsutil package to unzip files. When users use `zip.Unzip` to unzip zip files from a malicious attacker, they may be vulnerable to path traversal. The issue has been fixed in version 0.0.34. There are no known workarounds.

GHSA-5g39-ppwg-6xx8 — Go-huge-util vulnerable to path traversal when unzipping files

2026-10-26T02:35:10.414797+00:00

Affected: Go: github.com/dablelv/go-huge-util

Impact ZipSlip issue when use fsutil package to unzip files. When users use zip.Unzip to unzip zip files from a malicious attacker, they may be vulnerable to path traversal.

Patches It has been fixed in v0.0.34, Please upgrade version to v0.0.34 or above.

Workarounds No, users have to upgrade version.

Specific Go Packages Affected github.com/dablelv/go-huge-util/zip

References

gsd-2023-28105

2026-10-26T02:35:10.414826+00:00

gsd-2023-28105