—
GO-2022-0779
Path traversal in github.com/ipfs/go-ipfs
Quick fix
GO-2022-0779 — github.com/ipfs/go-ipfs: upgrade to the fixed version with the command below.
go get github.com/ipfs/go-ipfs@v0.8.0Details
Path traversal in github.com/ipfs/go-ipfs
Are you affected?
Enter the version of the package you're using.
Affected packages
References
- https://github.com/ipfs/go-ipfs/security/advisories/GHSA-27pv-q55r-222g[ADVISORY]
- https://nvd.nist.gov/vuln/detail/CVE-2020-26279[ADVISORY]
- https://github.com/ipfs/go-ipfs/commit/b7ddba7fe47dee5b1760b8ffe897908417e577b2[FIX]
- https://github.com/whyrusleeping/tar-utils/commit/20a61371de5b51380bbdb0c7935b30b0625ac227[WEB]