VDB
Sign up
HIGH7.5

GHSA-fjgq-224f-fq37

Goa vulnerable to path traversal

Quick fix

GHSA-fjgq-224f-fq37 — github.com/goadesign/goa: upgrade to the fixed version with the command below.

go get github.com/goadesign/goa@v1.4.3

Details

Improper path santiziation in github.com/goadesign/goa before v3.0.9, v2.0.10, or v1.4.3 allow remote attackers to read files outside of the intended directory

Are you affected?

Enter the version of the package you're using.

Affected packages

Go/github.com/goadesign/goa
Introduced in: 0Fixed in: 1.4.3
Fixgo get github.com/goadesign/goa@v1.4.3
Go/goa.design/goa
Introduced in: 0Fixed in: 1.4.3
Fixgo get goa.design/goa@v1.4.3
Go/goa.design/goa/v3
Introduced in: 0Fixed in: 3.0.9
Fixgo get goa.design/goa/v3@v3.0.9

References