VDB
KO

GO-2026-5452

Ferret: Path Traversal in IO::FS::WRITE allows arbitrary file write in github.com/MontFerret/ferret

Quick fix

GO-2026-5452 — github.com/MontFerret/ferret/v2: upgrade to the fixed version with the command below.

go get github.com/MontFerret/ferret/v2@v2.0.0-alpha.4

Details

Ferret: Path Traversal in IO::FS::WRITE allows arbitrary file write in github.com/MontFerret/ferret

Are you affected?

Enter the version of the package you're using.

Affected packages

Go / github.com/MontFerret/ferret/v2
Introduced in: 0 Fixed in: 2.0.0-alpha.4
Fix go get github.com/MontFerret/ferret/v2@v2.0.0-alpha.4

References