—
GO-2024-3196
Extract has insufficient checks allowing attacker to create symlinks outside the extraction directory. in github.com/codeclysm/extract
Quick fix
GO-2024-3196 — github.com/codeclysm/extract/v4: upgrade to the fixed version with the command below.
go get github.com/codeclysm/extract/v4@v4.0.0Details
Extract has insufficient checks allowing attacker to create symlinks outside the extraction directory. in github.com/codeclysm/extract
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/github.com/codeclysm/extract
Introduced in:
0No fixed version published yet for github.com/codeclysm/extract (go modules). Pin to a known-safe version or switch to an alternative.
Go/github.com/codeclysm/extract/v3
Introduced in:
0No fixed version published yet for github.com/codeclysm/extract/v3 (go modules). Pin to a known-safe version or switch to an alternative.
Go/github.com/codeclysm/extract/v4
Introduced in:
0Fixed in: 4.0.0Fix
go get github.com/codeclysm/extract/v4@v4.0.0