AI Score
Confidence
High
EPSS
Percentile
29.8%
Using Reader.Open on an archive containing a file with a path prefixed by โโฆ/โ will cause a panic due to a stack overflow. If parsing user supplied archives, this may be used as a denial of service vector.
go.dev/cl/300489
go.dev/issue/44916
go.googlesource.com/go/+/cd3b4ca9f20fd14187ed4cdfdee1a02ea87e5cd8
groups.google.com/g/golang-announce/c/MfiLYjG-RAw/m/zzhWj5jPAQAJ