HIGH7.5
GO-2022-0524
Stack exhaustion when reading certain archives in compress/gzip
Quick fix
GO-2022-0524 — stdlib: upgrade to the fixed version with the command below.
go get stdlib@v1.17.12Details
Calling Reader.Read on an archive containing a large number of concatenated 0-length compressed files can cause a panic due to stack exhaustion.
Are you affected?
Enter the version of the package you're using.