—
GO-2023-1600
Arbitrary code execution in github.com/kitabisa/teler-waf
Quick fix
GO-2023-1600 — github.com/kitabisa/teler-waf: upgrade to the fixed version with the command below.
go get github.com/kitabisa/teler-waf@v0.2.0Details
Improper handling of payload with special characters, such as CR/LF and horizontal tab, can lead to execution of arbitrary JavaScript code.
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/github.com/kitabisa/teler-waf
Introduced in:
0Fixed in: 0.2.0Fix
go get github.com/kitabisa/teler-waf@v0.2.0