—

GO-2021-0237

Open redirect in github.com/AndrewBurian/powermux

Quick fix

GO-2021-0237 — github.com/AndrewBurian/powermux: upgrade to the fixed version with the command below.

go get github.com/AndrewBurian/powermux@v1.1.1

Details

Attackers may be able to craft phishing links and other open redirects by exploiting PowerMux's trailing slash redirection feature. This may lead to users being redirected to untrusted sites after following an attacker crafted link.

Are you affected?

Enter the version of the package you're using.

Affected packages

Go/github.com/AndrewBurian/powermux

Introduced in: 0Fixed in: 1.1.1

Fixgo get github.com/AndrewBurian/powermux@v1.1.1

References

https://github.com/AndrewBurian/powermux/pull/42[FIX]
https://github.com/AndrewBurian/powermux/commit/5e60a8a0372b35a898796c2697c40e8daabed8e9[FIX]