VDB
KO

GO-2026-5464

androidqf: Zip entry Name Injection in APK bundle (Zip Slip for zip consumers) in github.com/mvt-project/androidqf

Details

androidqf: Zip entry Name Injection in APK bundle (Zip Slip for zip consumers) in github.com/mvt-project/androidqf

Are you affected?

Enter the version of the package you're using.

Affected packages

Go / github.com/mvt-project/androidqf
Introduced in: 0 Fixed in: 1.8.3
Fix go get github.com/mvt-project/androidqf@v1.8.3

References