—
GO-2022-0569
Path traversal in github.com/beego/beego and beego/v2
Quick fix
GO-2022-0569 — github.com/beego/beego: upgrade to the fixed version with the command below.
go get github.com/beego/beego@v1.12.11Details
The leafInfo.match() function uses path.join() to deal with wildcard values which can lead to cross directory risk.
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/github.com/astaxie/beego
Introduced in:
0No fixed version published yet for github.com/astaxie/beego (go modules). Pin to a known-safe version or switch to an alternative.
Go/github.com/beego/beego/v2
Introduced in:
2.0.0Fixed in: 2.0.4Fix
go get github.com/beego/beego/v2@v2.0.4