VDB
Sign up
—

GO-2026-4675

Quill has unbounded memory allocation via unvalidated size fields in Mach-O binary parsing in github.com/anchore/quill

Quick fix

GO-2026-4675 — github.com/anchore/quill: upgrade to the fixed version with the command below.

go get github.com/anchore/quill@v0.7.1

Details

Quill has unbounded memory allocation via unvalidated size fields in Mach-O binary parsing in github.com/anchore/quill

Are you affected?

Enter the version of the package you're using.

Affected packages

Go/github.com/anchore/quill
Introduced in: 0Fixed in: 0.7.1
Fixgo get github.com/anchore/quill@v0.7.1

References