—
GO-2023-1803
In Lima, a malicious disk image could read a single file on the host filesystem as a qcow2/vmdk backing file in github.com/lima-vm/lima
Quick fix
GO-2023-1803 — github.com/lima-vm/lima: upgrade to the fixed version with the command below.
go get github.com/lima-vm/lima@v0.16.0Details
In Lima, a malicious disk image could read a single file on the host filesystem as a qcow2/vmdk backing file in github.com/lima-vm/lima
Are you affected?
Enter the version of the package you're using.