—
GO-2026-5464
androidqf: Zip entry Name Injection in APK bundle (Zip Slip for zip consumers) in github.com/mvt-project/androidqf
Quick fix
GO-2026-5464 — github.com/mvt-project/androidqf: upgrade to the fixed version with the command below.
go get github.com/mvt-project/androidqf@v1.8.3Details
androidqf: Zip entry Name Injection in APK bundle (Zip Slip for zip consumers) in github.com/mvt-project/androidqf
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/github.com/mvt-project/androidqf
Introduced in:
0Fixed in: 1.8.3Fix
go get github.com/mvt-project/androidqf@v1.8.3