HIGH7.8Go
GHSA-364c-vvqx-446c· CVE-2023-43620, GO-2023-2068Croc sender may place ANSI or CSI escape sequences in filename to attach receiver's terminal device
Modified: 9/10/2026
package
Go/github.com/schollz/croc/v9
pkg:go/github.com/schollz/croc/v9
MEDIUM4.7Go
GHSA-7g3v-4ggr-xvjf· CVE-2023-43621, GO-2023-2069Croc may expose secret to local users
Modified: 9/10/2026
MEDIUM5.3Go
GHSA-7mp6-929p-pqhj· CVE-2023-43618, GO-2023-2070Croc requires senders to provide local IP addresses in cleartext
Modified: 9/10/2026
MEDIUM5.3Go
GHSA-hp56-xvf4-g6wr· CVE-2023-43617, GO-2023-2072Cros secrets may be disclosed to untrusted relay
Modified: 9/10/2026
HIGH7.8Go
GHSA-ppjh-xp5v-46wc· CVE-2023-43619, GO-2023-2073Croc sender may send dangerous new files to receiver
Modified: 9/10/2026
—Go
GO-2023-2068· CVE-2023-43620, GHSA-364c-vvqx-446cCroc sender may place ANSI or CSI escape sequences in filename to attach receiver's terminal device in github.com/schollz/croc
Modified: 2/4/2026
—Go
GO-2023-2069· CVE-2023-43621, GHSA-7g3v-4ggr-xvjfCroc may expose secret to local users in github.com/schollz/croc
Modified: 2/4/2026
—Go
GO-2023-2070· CVE-2023-43618, GHSA-7mp6-929p-pqhjCroc requires senders to provide local IP addresses in cleartext in github.com/schollz/croc
Modified: 2/4/2026
—Go
GO-2023-2071· CVE-2023-43616, GHSA-8c8w-f7wp-2jr2Sender can cause a receiver to overwrite files during ZIP extraction in Croc in github.com/schollz/croc
Modified: 2/4/2026
—Go
GO-2023-2072· CVE-2023-43617, GHSA-hp56-xvf4-g6wrCros secrets may be disclosed to untrusted relay in github.com/schollz/croc
Modified: 2/4/2026
—Go
GO-2023-2073· CVE-2023-43619, GHSA-ppjh-xp5v-46wcCroc sender may send dangerous new files to receiver in github.com/schollz/croc
Modified: 2/4/2026