age vulnerable to malicious plugin names, recipients, or identities causing arbitrary binary execution

🗓️ 18 Dec 2024 00:00:00Reported by https://gitlab.com/gitlab-org/security-products/gemnasium-dbType

Vulnerabilities in plugin names allow arbitrary binary execution via manipulated recipient or identity strings.

Vulners

Node

go ageRange<1.2.1

Source	Link
github	www.github.com/advisories/GHSA-32gq-x56h-299c
github	www.github.com/FiloSottile/age/security/advisories/GHSA-32gq-x56h-299c
github	www.github.com/str4d/rage/security/advisories/GHSA-4fg7-vxc8-qx5w
github	www.github.com/FiloSottile/age/commit/482cf6fc9babd3ab06f6606762aac10447222201
github	www.github.com/FiloSottile/age

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

18 Dec 2024 00:00Current

7.5High risk

Vulners AI Score7.5