| package = "archive/zip" |
| |
| stdlib = true |
| |
| description = """ |
| Using Reader.Open on an archive containing a file with a path |
| prefixed by "../" will cause a panic due to a stack overflow. |
| """ |
| |
| cve = "CVE-2021-27919" |
| |
| symbols = ["toValidName"] |
| |
| published = "2021-04-14T12:00:00Z" |
| |
| [[versions]] |
| introduced = "go1.16" |
| fixed = "go1.16.1" |
| |
| [links] |
| commit = "https://github.com/golang/go/commit/cd3b4ca9f20fd14187ed4cdfdee1a02ea87e5cd8" |
| pr = "https://go-review.googlesource.com/c/go/+/300489" |
| context = ["https://github.com/golang/go/issues/44916"] |
