—

GO-2023-1597

Cross site scripting in github.com/kitabisa/teler-waf

Quick fix

GO-2023-1597 — github.com/kitabisa/teler-waf: upgrade to the fixed version with the command below.

go get github.com/kitabisa/teler-waf@v0.1.1

Details

Improper sanitization and filtering of HTML entities in user input can lead to cross-site scripting (XSS) attacks where arbitrary JavaScript code is executed in the browser.

Are you affected?

Enter the version of the package you're using.

Affected packages

Go/github.com/kitabisa/teler-waf

Introduced in: 0Fixed in: 0.1.1

Fixgo get github.com/kitabisa/teler-waf@v0.1.1

References

https://github.com/kitabisa/teler-waf/commit/d1d49cfddfa3ec2adad962870f14b85cd1aaf739[FIX]
https://github.com/kitabisa/teler-waf/releases/tag/v0.1.1[WEB]
https://github.com/advisories/GHSA-9f95-hhg4-pg4f[ADVISORY]