—
GO-2023-1509
Path Traversal in github.com/go-sonic/sonic
Quick fix
GO-2023-1509 — github.com/go-sonic/sonic: upgrade to the fixed version with the command below.
go get github.com/go-sonic/sonic@v1.0.5Details
Path Traversal in github.com/go-sonic/sonic
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/github.com/go-sonic/sonic
Introduced in:
0Fixed in: 1.0.5Fix
go get github.com/go-sonic/sonic@v1.0.5References
- https://github.com/advisories/GHSA-2x48-p6cq-5xcw[ADVISORY]
- https://nvd.nist.gov/vuln/detail/CVE-2022-46959[ADVISORY]
- https://github.com/go-sonic/sonic/pull/61/commits/3b00266a13fa69284f4b3f4b37d29be8f8e02f31[FIX]
- https://github.com/go-sonic/sonic/issues/56[REPORT]
- https://github.com/go-sonic/sonic/releases/tag/v1.0.5[WEB]