MEDIUM5.5Go
GHSA-8c8w-f7wp-2jr2· CVE-2023-43616, GO-2023-2071Sender can cause a receiver to overwrite files during ZIP extraction in Croc
Modified: 9/10/2026
package
Go/github.com/schollz/croc
pkg:go/github.com/schollz/croc
—Go
GO-2023-2068· CVE-2023-43620, GHSA-364c-vvqx-446cCroc sender may place ANSI or CSI escape sequences in filename to attach receiver's terminal device in github.com/schollz/croc
Modified: 2/4/2026
—Go
GO-2023-2069· CVE-2023-43621, GHSA-7g3v-4ggr-xvjfCroc may expose secret to local users in github.com/schollz/croc
Modified: 2/4/2026
—Go
GO-2023-2070· CVE-2023-43618, GHSA-7mp6-929p-pqhjCroc requires senders to provide local IP addresses in cleartext in github.com/schollz/croc
Modified: 2/4/2026
—Go
GO-2023-2071· CVE-2023-43616, GHSA-8c8w-f7wp-2jr2Sender can cause a receiver to overwrite files during ZIP extraction in Croc in github.com/schollz/croc
Modified: 2/4/2026
—Go
GO-2023-2072· CVE-2023-43617, GHSA-hp56-xvf4-g6wrCros secrets may be disclosed to untrusted relay in github.com/schollz/croc
Modified: 2/4/2026
—Go
GO-2023-2073· CVE-2023-43619, GHSA-ppjh-xp5v-46wcCroc sender may send dangerous new files to receiver in github.com/schollz/croc
Modified: 2/4/2026