—
GO-2023-1895
Zinc Cross-site Scripting vulnerability in github.com/zinclabs/zinc
Quick fix
GO-2023-1895 — github.com/zinclabs/zinc: upgrade to the fixed version with the command below.
go get github.com/zinclabs/zinc@v0.3.2Details
Zinc Cross-site Scripting vulnerability in github.com/zinclabs/zinc
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/github.com/zinclabs/zinc
Introduced in:
0.1.9Fixed in: 0.3.2Fix
go get github.com/zinclabs/zinc@v0.3.2References
- https://github.com/advisories/GHSA-4fgv-8448-gf82[ADVISORY]
- https://nvd.nist.gov/vuln/detail/CVE-2022-32171[ADVISORY]
- https://github.com/zinclabs/zinc/commit/3376c248bade163430f9347742428f0a82cd322d[FIX]
- https://github.com/zincsearch/zincsearch/commit/3376c248bade163430f9347742428f0a82cd322d[WEB]
- https://www.mend.io/vulnerability-database/CVE-2022-32171[WEB]