34 matches found
Astra Linux - Vulnerability in Golang-1.23
The “go tool pack” subcommand usually used only by the compiler as an internal tool with known-good inputs does not sanitize output filenames. Extracting a malicious archive file using the “pack” subcommand can result in files being written to arbitrary locations within the filesystem...
5.9CVSS6.9AI score0.0017EPSS
SaveExploits0References2
20